Security Event Notifications

Platform Security > Security Center >

View, manage, and analyze the default security event notification policies on your ServiceNow instance, as well as access the functionality to create custom policies.

Access Security Event Notifications from the Security Center homepage by opening the Security Monitoring Console in the Security Consoles section, then selecting the Security Event Notifications tab.

Customize and create notification policies that trigger email notifications when users perform actions in the Now Platform that might be insecure or require admin monitoring.

Admins can customize the values for the default policies, clone, and edit default policies or create their own custom ones.

Security policies The Security Event Notifications console displays important information regarding the security policies on your instance. This table includes columns displaying: Label Description Name The name of the security event notification policy. Status The status of a policy can be either active or inactive. Updated The date and time of when the policy was last updated. Updated by The user that updated a policy. Last triggered on The date and time the policy last ran. Triggered count last week The number of triggers a policy generated the past 7 days. Percentage change The rate of change for weekly triggers, calculated as a percentage. Note: For example, if this policy triggers an average of 5 notifications a week and it triggered 10 times last week, that would be a percentage increase of 100%.

Select a policy on the table to view more detail, including an overview, settings, and notification history. Select the New custom policy button to create a custom policy tailored to your organization's use cases.

Manage security banner announcements Select Manage announcement settings to control whether admins receive banner notifications on this instance. For information on these announcements, see Security banner announcements .

Create custom security event notification policies Learn how to create custom security event notifications that are specific to your organization's needs. This enables you to monitor actions taken by users and groups on your instance and generate notifications for potential security risks. Modify security event notification policies Learn how to modify the settings of your security event notification policies. Configure preferences for security event notification policies Discover how to customize security event notification policies in Security Center to align with your organization's specific needs. Security Event Notifications history Explore the complete history of security event notifications on your instance.

Parent Topic: Security monitoring console