Maintain risk score weights

The risk score weights used to calculate risk scores in security incidents can be removed or updated on an individual basis. They can also be removed or updated for all security incidents. The ability to remove them from security incidents is useful when changing weight values.

Before you begin

Role required: sn_sec_cmn.admin
Note: Users with the sn_si.read role can view the risk score configuration in Security Incident Response.

Procedure

  1. Navigate to Security Incident > Setup > Risk Score configuration.
    Note: Users with the sn_si.read role can view the risk score configuration by navigating to Security Incident > Alerts & Events > Risk Score Configuration.
  2. To add a new risk score weight, click New and enter information is the fields.
    Field DescriptionType
    Type Select the type of risk score you are defining.
    Value Specify the value associated with the selected type. If multiple values are available for the type, you may want to define multiple risk score weight records. Example: Security Incident Priority with a value of 1, Security Incident Priority with a value of 2, and so forth.
    Weight The weight associated with the selected type/value pair. Valid entries are between 0 through 100, with 0 being the lowest weight and 100 the highest.
  3. Click Submit.
  4. Perform any of these steps, as needed.
    • To clear a risk score weight record, open it from the list and click Delete.
    • To clear all risk score weight records, click Clear All Risk Scores.
    • To update all risk score weight records, click Update All Risk Scores.