Automated Closed-loop Remediation in CCS

Products

• Control Compliance Suite
• Control Compliance Suite Standards Server
• Control Compliance Suite Standards Module

Issue/Introduction

You want to implement an automated closed-loop remediation solution that detects missing patches in your environment, automatically installs the missing patches using a 3rd party patch deployment tool, and verifies the installed patches and thereby ensures the expected compliance posture of your IT environment.

Environment

CCS 12.6.x

Resolution

See the following information in the CCS documentation:

What is automated closed-loop remediation?

• About automated closed-loop remediation
  
  
• Workflow for closed-loop remediation
  
  
• Types of deployment for closed-loop remediation

Using Automated closed-loop remediation

• Configuring ServiceNow remediation ticket settings
  • Remediation ticket splitting logic
    
    
• Mapping of ServiceNow ticket status with CCS ticket status
  
  
• Monitoring the status of ServiceNow tickets in CCS
  
  
• Monitoring the Remediation Verification job
  
  
• Creating a ServiceNow ticket manually
  • Using the manifest file provided by CCS for patch remediation
    
    

Performance Tuning and Troubleshooting

• Configuring the remediation settings for optimal performance
  
  
• Troubleshooting remediation scenarios for CCS - ServiceNow integration