Vulnerability Response Rollup Calculators

Use the vulnerability rollup calculators to configure how the cumulative risk score is computed for vulnerability groups and imported vulnerabilities.

Use the vulnerability rollup calculators to configure how the cumulative risk score is computed for vulnerability groups and imported vulnerabilities. Two rollup calculators are shipped with the base system:

Vulnerability Group Rollup: Rolls up the risk scores for all vulnerable items in a vulnerability group, to provide an overall risk score for the entire group of vulnerable items.
Vulnerability Entry Rollup: Rolls up the risk scores for all vulnerable items with the same vulnerability entry, to provide an overall risk score for the vulnerability entry.

Configure the rollup calculator to specify how much weight to give each of those computed values in setting the cumulative risk score. The higher the weight, the more that value is used to determine the rolled up risk score in the vulnerability or vulnerability group.

Note: When Include deferred is selected, all deferred vulnerable items are included in the rollup calculation for the vulnerable group. Be sure that you understand the impact on the total calculation before selecting this option.

Rollup calculators are scheduled jobs the run every 15 minutes to pick up changes. These scheduled jobs also calculate cumulative values for the number of VIs, maximum risk score, as well as, remediation target date, and status for vulnerability group.

Note: Calculated values for vulnerability entries do not include remediation target data.

In the Vulnerability rollup calculator example, the formula for determining the Vulnerability Group Risk Score is:

(Maximum risk score/100) * 80 + (Average risk score /100) * 5 + (factor * 15)

The factor is determined as follows:


VI count	Factor
<10	0.2
1 - 99	0.4
100 - 1000	0.6
1001- 9999	0.8
> 10000	1

So, for vulnerability group, VUL324567, with three vulnerable item Risk scores:

30 (Ignored)
40 (Average risk score)
50 (Maximum risk score)

the vulnerability group, VUL32456, Risk Score would be 45

(50/100) * 80 + (40/100) * 5 + 0.2 * 15 = 40 + 2 + 3 = 45

Vulnerability Response Rollup Calculators

Use the vulnerability rollup calculators to configure how the cumulative risk score is computed for vulnerability groups and imported vulnerabilities.

Vulnerability Group Rollup: Rolls up the risk scores for all vulnerable items in a vulnerability group, to provide an overall risk score for the entire group of vulnerable items.
Vulnerability Entry Rollup: Rolls up the risk scores for all vulnerable items with the same vulnerability entry, to provide an overall risk score for the vulnerability entry.

Note: Calculated values for vulnerability entries do not include remediation target data.

In the Vulnerability rollup calculator example, the formula for determining the Vulnerability Group Risk Score is:

(Maximum risk score/100) * 80 + (Average risk score /100) * 5 + (factor * 15)

The factor is determined as follows:


VI count	Factor
<10	0.2
1 - 99	0.4
100 - 1000	0.6
1001- 9999	0.8
> 10000	1

So, for vulnerability group, VUL324567, with three vulnerable item Risk scores:

30 (Ignored)
40 (Average risk score)
50 (Maximum risk score)

the vulnerability group, VUL32456, Risk Score would be 45

(50/100) * 80 + (40/100) * 5 + 0.2 * 15 = 40 + 2 + 3 = 45

How search works:

Topics are ranked in search results by how closely they match your search terms

Vulnerability Response Rollup Calculators

Vulnerability Response Rollup Calculators

On this page

Vulnerability Response Rollup Calculators

Vulnerability Response Rollup Calculators

Log in to personalize your search results and subscribe to topics