GetSome ServiceNow @GetSomeService

Try this simple test. If your score is less than 90... Contact me :)

We have a new product coming out for ServiceNow! PlatformMasker - GetSome announce they are about to release a new product for ServiceNow. The PlatformMasker product enables ServiceNow clients to mask and anonymize data in sub-production instances like Dev and Test, thus reducing cyber risk and reducing the cyber attack surface of your organisation. If your business is interested in reducing cyber risk, check out GetSome's PlatformMasker product.

GetSome at Knowledge 2025! We have partnered with a major ServiceNow Partner who will be promoting our PlatformProtect service as their own at Knowledge!

Beware of importing XML into ServiceNow if you are processing it with XMLDocument, XMLDocument2 or XMLUtils, as you can be vulnerable to attack! This applies to custom SOAP integrations you may have built too.

Where can I get some hair like Bills? @BillRMcDermott

Bill McDermott @BillRMcDermott

a year ago

Great leadership starts with empathy.  When you read the room and lead with heart.. you build trust that becomes a force for your teams and customers. That kind of unity is how we all WIN. Let's Go get it 💪❤️ #MondayMotivation

9 14 124 8K 16

NEW! ServiceNow Google Agent to Agent A2A Protocol announced. ServiceNow announces Google’s Agent2Agent (A2A) protocol, an open-source standard launched at Google Cloud Next '25 on April 9, 2025, to enable AI agents from different vendors to collaborate seamlessly. A2A allows agents to discover capabilities via JSON-based Agent Cards, manage tasks with defined lifecycles, and exchange data securely using HTTP, JSON-RPC, and Server-Sent Events. It aims to break down silos, boost enterprise automation, and foster innovation, with a production-ready version planned for later 2025. Over 50 partners, including Salesforce, SAP, and MongoDB, support the initiative, contributing to its development and specification. ServiceNow’s Involvement: ServiceNow is highlighted as one of the key technology partners actively contributing to A2A’s definition and technical specification. Their involvement underscores their commitment to interoperable AI systems, aligning with A2A’s goal of enabling agents to work across platforms, enhancing productivity in enterprise workflows.

ServiceNow beware changing system properties in Production!

ServiceNow Security Check! - Set safe content security policy for svg files. The com.glide.csp.self_script_src_svg property, introduced in Security Center 1.3 (Yokohama release, updated Jan 30, 2025), is a system property that enhances security for SVG files accessed via the Translation Memory Index (IIX) file extension. When set to true (the default and recommended value), it adds a script-src none directive to the Content-Security-Policy (CSP) header. This blocks SVG files from executing external scripts, mitigating risks like cross-site scripting (XSS) attacks. The property falls under the category of validation, sanitization, and encoding, with no dependencies or prerequisites. Risk Description If com.glide.csp.self_script_src_svg is not set to false (i.e., left as true, which is the secure setting), there is no risk, as it enforces the intended protection. However, if it is mistakenly set to false, SVG files could execute arbitrary JavaScript code embedded by a malicious actor. This could lead to severe security vulnerabilities, such as data exfiltration (stealing sensitive information) or session takeover (hijacking a user’s session). The security risk is rated high, with a severity score of 7.1 on the CVSS scale, highlighting the potential for significant exploitation if this safeguard is disabled.

ServiceNow Critical update! 3DES deprecation for Password2 fields. This is a customer action that you need to address. ServiceNow will fully deprecate the use of 3DES encryption come Zurich release. 3DES is considered insecure and is not NIST compliant. Let GetSome help you manage this deprecation and implement the more secure AES encryption via the KMF (Key Management Framework).

Have I got a ServiceNow ACL course for you! This is the most comprehensive ACL course around. If you are new to ServiceNow or manage a team, get them to do this course. It has everything they need to know in one location! Copy paste the lovely long Teachable link and check it out

How PlatformProtect surpasses ServiceNow HealthScan.... PlatformProtect™ by GetSome safeguards your ServiceNow investment, targeting Security, Privacy, Health, and License Optimization. It offers an independent assessment, remediation of vulnerabilities, and ongoing maintenance to reduce risk. The PlatformProtect Assessment delivers a 360-degree risk audit, uncovering security gaps, privacy issues, and licensing waste, with a clear remediation roadmap. IT leaders choose it for C-suite confidence, advanced threat detection beyond ServiceNow’s HealthScan, and maximized ROI. Download a sample report at platformprotect.site. The service includes a Comprehensive Assessment identifying risks, Guided Remediation with expert support, and a Maintenance Plan with regular scans and updates. You get a detailed report, vulnerability insights, risk quantification, and an actionable plan. PlatformProtect Remediation resolves issues with expert-led fixes, collaboration, and full documentation, enhancing security, privacy, platform health, and licensing efficiency. Maintenance ensures long-term protection with monthly updates, scans, and tailored solutions, keeping your ServiceNow secure, compliant, and optimized. Contact [email protected] to start. #platformprotect #servicenowsecurity #secureyourservicenow #secureyourinstance #servicenowprivacy #servicenowplatformhealth #dataprivacy #datasecurity #servicenowdeveloper #servicenow #servicenowcourse #servicenowadmin #servicenowtraining #servicenowcertification #servicenowtutorial #servicenowdeveloper #getsomeservicenow #getsome

What is ServiceNow's Shared Responsibility Model and why it matters to you! What is ServiceNow's Shared Responsibility Model? | Security Guide for Admins Wondering what is ServiceNow's Shared Responsibility Model? In this video, we break down the critical framework that defines security responsibilities between you (the Customer), ServiceNow, and data center providers. Understand how to secure your ServiceNow instance effectively by knowing who owns what—from data encryption to infrastructure management. What You’ll Learn: The role of the Customer in securing instance configuration, authentication, and data management ServiceNow’s responsibilities, like secure SDLC processes, vulnerability management, and cloud infrastructure security How colocation providers handle physical security and data center operations Why this model matters for ServiceNow security and compliance Boost your ServiceNow security knowledge and ensure compliance! If you’re searching for “what is ServiceNow’s Shared Responsibility Model” or “ServiceNow security responsibilities,” this is your ultimate guide. Subscribe for more ServiceNow tips, and drop your questions in the comments—we’re here to help secure your instance!

What is Data Privacy in ServiceNow? Here's a question for you... Do you know each time an Admin exports data from your sys_user table? Do you know why they exported that data (containing names, gender, email, mobile, address information)? Data Privacy is a growing concern, make sure you are on top of it. And if you aren't, then contact GetSome

Upcoming Security actions you need to address...

Is your ServiceNow Subscription Management and Licensing setup right?

AI biases, Garbage In = Gargabe Out....

Want a strategy for how to remove old roles in ServiceNow? If you are a ServiceNow admin and concerned about Platform Security then have a watch...

ServiceNow - Can I Z-boot Production?

How secure have you made your ServiceNow environment? Are you confident your ServiceNow instance is secure—or are you leaving the door open to risks? Call us if you need help securing your ServiceNow.