Create a security incident calculator

Security incident calculators allow you to calculate the severity of a security incident based on pre-defined formulas. You can define your own security incident calculators, as needed.

Before you begin

Role required: sn_si.admin

Procedure

  1. Navigate to Security Incident > Setup > Security Incident Calculator Groups.
  2. Click the name of the group for which you want to create a calculator, or you can create a new group.
  3. Click New.
  4. Fill in the fields on the form, as appropriate.
    Field Description
    Name The name of the security incident calculator.
    Calculator Group Name of the group to which this calculator belongs.
    Note: Creating or changing the calculator group becomes available after you have entered a Name and Table.
    Table

    Select the table to be used for this calculator.

    When you add calculators to tables other than Vulnerability [sn_vul_vulnerability] and Vulnerable Item [sn_vul_vulnerable_item], you must add business rules and UI Actions to those tables. To see examples:
    • Navigate to System Definition > Business Rules, and locate the Calculate Severity business rule on the Vulnerable Item [sn_vul_vulnerable_item] table.
    • Navigate to System UI > UI Actions, and locate the Calculate Severity UI action on the Vulnerable Item [sn_vul_vulnerable_item] table.

    The vulnerability admin role must be granted full read, write (or save_as_template) capabilities on any table used by a calculator. These roles properly see the values to apply to the template.

    Application The scoped application to which the calculator belongs.
    Order The order in which the security incident calculator runs. A calculator with an order entry of 100 runs before a calculator with an order entry of 200.
    Active Turn the calculator on or off.
    Description A description of this calculator.
  5. Right-click the form header and select Save. Two tabs, Conditions and Values to Apply, appear.
  6. Fill in the fields in the Conditions tab, as appropriate.
    Field Description
    Use filter group Select this check box to use a predefined filter group or create a new filter group to define the calculator criteria.
    Filter group Select the filter group to use for defining a calculator.

    This field appears only if you selected the Use filter groups check box.

    Use advanced condition Select this check box to indicate that a script condition is used to determine when this calculator is applied. When you select the check box, an Advanced condition scripting field appears.

    If you selected the Use filter group check box, this field is hidden.

    Note: Before you define advanced conditions and write scripts for determining when the security incident calculators are applied, return to the Security Incident Calculators list. Explore the calculator records shipped with the base system.
    Condition Defines basic filter conditions for determining whether the calculator is used.

    If you selected either of the Use filter group or Use advanced conditions check boxes, this field is hidden.

  7. Click the Values to Apply tab and fill in the fields on the form, as appropriate. You have the choice of creating a script for defining the values to apply to the calculation or defining a template based on fields in the selected table.
    Field Description
    Use script values Select this check box to define field values with a script.
    Script values Defines what values to apply the calculations to.

    This field appears only if you selected the Use script values check box.

    Template Right-click the form header and select Save. Select the fields and values you want to use for the calculator.
  8. When you have completed all entries, click Submit.