Where can a change manager define the conditions that must be met before a change request can move from one state to another?
Define the model state transitions and conditions to control how a vulnerability traverses through the different workflow states.
https://www.servicenow.com/docs/bundle/yokohama-governance-risk-compliance/page/product/grc-operational-res/task/define-model-state-transitions-for-vul.html