About risk score

In Control Compliance Suite, a risk score is used to quantify the risk that is associated with an asset in your organization.

The risk score is calculated on the basis of the CIA values for an asset and the risk attributes of a check. You should give due consideration before you specify these values in the product.

You can specify the asset CIA values through the assets details pane or with the pre rules in the asset view.

See Using a Pre rule to set the values of the common fields.

You can specify the check risk attributes through the checks details pane or at the time of check creation.

See Specifying or editing the check attributes.

The risk calculations are based on the Common Vulnerabilities Scoring System version 2.

See About risk calculations.