View the types of actions you can take to reduce the Risk Index.
The following table outlines the actions that directly impact the Risk Index.
Action
|
Description
|
||
Remediate risk events
|
Taking the recommended remediation steps might automatically adjust the Risk Index,
depending on the risk event.
For example, Attack Surface Risk Management recommends
applying the latest patches or upgrading the operating system whenever vulnerability-related
risk events are detected. As vulnerability assessments are conducted daily, vulnerabilities
that are patched today do not affect the calculation of tomorrow's Risk Index.
|
||
Change the status of risk events
|
To track your remediation progress, you can change the status of
risk events. Changing the status of risk events affects individual asset risk scores
and
ultimately your organization's Risk Index.
Risk events for six of the eight risk factors
can be marked as one of the five following statuses:
When marking a risk event as Dismissed, you may create an event
rule so that future instances of the event are not reported and do not contribute
to your Risk
Index.
To view and remove previously created event rules, go to Event Rule Management.
For vulnerability-related risk events, the
Remediated, Dismissed, and
Accepted statuses are not currently available. Instead, use the
Closed status to prevent risk events from affecting the Risk Index.
The status of XDR
detection-related risk events that have an assigned workbench alert can only be changed
in the Workbench app.
|