Within the ServiceNow Instance Security Center (ISC), administrators monitor and manage the security health of their instance. To track inactive users with high-level access, the administrator must consult Security metrics .
1. Security Metrics in the ISC:
The Security Metrics section is designed to provide actionable data regarding user behavior and access compliance. It includes specific, tracked indicators such as " Privileged users who have never logged in " or " Inactive Privileged Users. " By reviewing these metrics, an administrator can identify accounts holding roles like admin or security_admin that pose an unnecessary risk because they are completely unused.
2. Why the other options are incorrect:
* A (Security scanner): This tool is used to scan the instance for misconfigurations, weak settings, or non-compliant properties, rather than tracking individual user login behaviors over time.
* B (Security posture dashboard): This is an overarching dashboard summarizing the general compliance score and high-level events, but the specific operational lists of inactive user accounts are housed under the detailed metrics.
* D (Security hardening): This section provides a list of recommended security properties to enable or adjust (like password policies or ACL strictness) to fortify the instance, not a behavioral report of users.
Reference:
ServiceNow Instance Security Center documentation details the Security Metrics component as the area responsible for tracking and surfacing metrics related to user access, including inactive privileged accounts.