The 18 ServiceNow security checks Black Cat runs
Black Cat SSPM evaluates 18 security policies against your ServiceNow configuration on every scan, classifies each finding by risk, and provides remediation steps. Browse them by topic below.
How to connect ServiceNow — what access Black Cat needs, and why.
Identity, MFA & sign-in
6 checks · highest severity: critical
Access control & privilege
4 checks · highest severity: high
Third-party & OAuth apps
4 checks · highest severity: high
Lifecycle & offboarding
4 checks · highest severity: high
Identity, MFA & sign-in (6)
- Inactive User With Roles severity: high
- MFA Not Enforced For Admins severity: critical
- User Locked Out severity: info
- Default Admin Account Active severity: critical
- Weak Password Policy severity: critical
- Session Timeout Too Long severity: medium
Access control & privilege (4)
- Admin Role Sprawl severity: high
- Empty Group With Roles severity: medium
- Overly Permissive ACL severity: high
- Scheduled Job Runs As Admin severity: high
Third-party & OAuth apps (4)
- OAuth App Long Token Lifespan severity: medium
- OAuth App Insecure Redirect severity: high
- Insecure Plugin Active severity: medium
- Integration Using Basic Auth severity: high
Lifecycle & offboarding (4)
- Incident Auto-Assignment Disabled severity: low
- Change Approval Not Required severity: high
- Change Risk Assessment Disabled severity: medium
- CMDB Stale Records severity: medium