Where can a change manager define the interval frequency for unauthorized change detection?

The interval frequency for detecting unauthorized changes is configured within the Unauthorized Change Properties module. This module provides access to system properties that control the behavior of the unauthorized change detection feature. A specific property, change.unauthorized.scanfrequency, dictates the run time for the scheduled job that scans Configuration Items (CIs) for updates not linked to an approved change request. A change manager would navigate to this module to adjust how often this check occurs.

A. The ci.change.unplanned business rule contains the logic for creating an unauthorized change, but it does not define the periodic scanning interval for detection.
B. The Event Processing Properties module is related to Event Management and how the system processes incoming events from monitoring tools, not internal change process schedules.
D. An unauthorized change flow defines the actions to be taken after an unauthorized change is detected, not the frequency of the detection scan itself.

1. ServiceNow Product Documentation: "Unauthorized change properties". This document explicitly lists the system properties for the unauthorized change feature, including change.unauthorized.scanfrequency, which is described as the "Frequency for the scheduled job that scans for unauthorized changes." The module to access these settings is Change > Administration > Unauthorized Change Properties. (Accessed on current ServiceNow release documentation).