You can exclude entire insights or specific entries from an org’s risk-weighted scoring. Excluding an entire insight will omit that insight from being scored within the specific lens. Excluding an individual insight entry will omit the specific entry within the list from being scored. Consider, for example the Data Protection and Clasification lens, which includes an insight called profiles with access to high-risk fields. You can exclude risk profiles that aren't assigned to any user since these profiles don't contribute to the organization’s risk.
There are five risk rating options and each rating has a unique UI color. The suggested rating for an insight is marked "(Recommended)":
- Very High (Maroon)
- High (Red)
- Medium (Gold)
- Low (Green)
- Informational (Grey)
Exclude Insights
Using the insight's Options menu you can exclude an individual insight from scoring.
- Open the Options menu of the insight.
-
Select "Exclude Insight" or "Exclude Individual Insight Entries".
If you selected "Exclude Individual Insight Entries", a modal is displayed that lists the individual entries for the insight. Check the checkbox next to each entry to be excluded and click Next.
- Provide a reason for the exclusion and click Next.
- Click “Yes, complete this Exclusion” to confirm the exclusion.
- The modal closes and a banner is displayed at the top of Security Insights, indicating that a scoring policy change has been made and a new job must be run.
- Click the "Analyze Again…" button to run a new job.
Once the job is complete, the insight or insight entries are excluded from risk-weighted scoring.
Excluding a scored insight impacts the achieved points of that category’s score and how the insight is displayed in the lens score bar. Excluded insights can be shown or hidden by clicking the Exclusion button. The button UI changes based on whether excluded insights and entries are displayed or hidden from view.
Include Insights
Using the insight's Options menu you can include an excluded insight in scoring.
-
Open the Options menu of the insight to be included.
For specific entry inclusion, the excluded entries are hashed and display an exclusion flag icon. Click the flag to open the inclusion modal.
- A modal is displayed, listing the individual entries for the insight. Check the checkbox next to each entry to be included. Click Next and proceed to Step 3.
-
Select "Include Insight".
A modal is displayed. Provide a reason for the inclusion and click Next.
- Click “Yes, complete this Inclusion” to confirm the inclusion.
- The modal closes and a banner is displayed at the top of Security Insights, indicating that a scoring policy change has been made and a new job must be run.
- Click the “Analyze Again…” button to run a new job.
After the job is complete, the insight is included for risk-weighted scoring.