Create a severity calculator

Create your own severity calculators to define new formulas for calculating a security incident's severity.

Before you begin

Role required: sn_si.admin
Note: If the The security application is unlocked for admin to access property is set to Yes, this task can be performed by an admin user.

Procedure

  1. Navigate to Security Incident > Severity Calculations > Active Security Calculators.
  2. Click New.
  3. Fill in the fields on the form, as appropriate.
    Table 1. Severity calculator
    Field Description
    Name The name of the severity calculator.
    Risk The value that the Risk field will be set to when a security incident matches this calculation.

    If you select Leave Alone, the risk value will not be changed.

    Impact The value that the Impact field will be set to when a security incident matches this calculation.

    If you select Leave Alone, the impact value will not be changed.

    Priority The value that the Priority field will be set to when a security incident matches this calculation.

    If you select Leave Alone, the priority value will not be changed.

    Severity The value that the Severity field will be set to when a security incident matches this calculation.

    If you select Leave Alone, the severity value will not be changed.

    Application The application that contains this record.
    Table The Security Incident [sn_si_incident] table.
    Active Check box to activate this calculator.

    If you deactivate a calculator, you can view it by navigating to Security Incident > Severity Calculations > Inactive Severity Calculators.

    Order The order in which the severity calculator will run. The calculators run in ascending order. For example, a severity calculator with an order entry of 100 runs before a severity calculator with an order entry of 200.
    Description A description of this calculator.
    Condition Conditions to match the security incidents that you want to apply this calculator to.
    Use advanced condition Check box for using a script condition to determine when this severity calculator is applied.
    Advanced condition Conditions to determine when this severity calculator is applied. This field appears when Use advanced condition is selected.
    Use script values Check box for using a script to change the security incident values, instead of using the Risk, Impact, Priority, and Severity fields on this form.
    Script values Script to change the Risk, Impact, Priority, and Severity fields of the security incident. The Script values field appears when Use script values is selected.
  4. Click Submit.

Result

Figure 1. Sample Severity Calculator
Sample Severity Calculator