Use > Statements of Applicability > Scan and remediate

Scan and remediate

HPE ITOC determines which policy rules to run against which IT resources (within the business service) based on the rule scope and resource type. A compliance scan or remediation job runs against the revision of the current production policy and business service associated with the production revision of the SoA.

HPE ITOC uses a resource type hierarchy to determine which rules to test against which IT resources. For example, if a rule's scope is for Windows, it runs only against resources whose type is Windows or below in the resource- type hierarchy (e.g., it runs on Windows 2012, Windows 2012 R2, etc.).

Scanning and remediation occurs automatically through maintenance windows. However, you may need to run scanning and remediation manually, as described in the following section.

Manually scan and remediate

This section describes how to run a scan compliance or remediation job manually.

Run a scan compliance job

You must have the Run Scan Compliance Job permission to perform this task.

  1. From the Dashboard, Policy, or Business Service page, navigate to the production policy or business service you want to scan for compliance.
  2. Select an SoA in production state.
  3. From Actions, select Scan Compliance to initiate a scan compliance job.

    Your compliance results appear. If any of your IT resources are out of compliance, you can initiate a Run Remediation job.

Run a remediation job

You must have the Run Remediation Job permission to perform this task.

  1. From the Dashboard, Policy, or Business Service page, navigate to the production policy or business service you want to remediate.
  2. Select an SoA in production state.
  1. From Actions, select Run Remediation to initiate a remediation job.

    The job remediates non-compliant resources and updates the compliance results.

Related Topics IconRelated Information