diff --git a/ee/app/models/security/orchestration_policy_configuration.rb b/ee/app/models/security/orchestration_policy_configuration.rb
index 3c12f0097a88cc30e3a534c4ee9f7d6249b95c69..ddae00172dceb8be579e4de36dceda2f426cbeeb 100644
--- a/ee/app/models/security/orchestration_policy_configuration.rb
+++ b/ee/app/models/security/orchestration_policy_configuration.rb
@@ -24,7 +24,7 @@ class OrchestrationPolicyConfiguration < ApplicationRecord
     # json_schemer computes an $id fallback property for schemas lacking one.
     # But this schema is kept anonymous on purpose, so the $id is stripped.
     POLICY_SCHEMA_JSON = POLICY_SCHEMA.value.except('$id')
-    AVAILABLE_POLICY_TYPES = (%i[scan_execution_policy pipeline_execution_policy] +
+    AVAILABLE_POLICY_TYPES = (%i[scan_execution_policy pipeline_execution_policy vulnerability_management_policy] +
       Security::ScanResultPolicy::SCAN_RESULT_POLICY_TYPES).freeze
     JSON_SCHEMA_VALIDATION_TIMEOUT = 5.seconds