Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Prioritizing High Risk Vulnerabilities by Applying Risk Policies

SUMMARY In JSA Vulnerability Manager, you can alert administrators to high-risk vulnerabilities by applying risk policies to your vulnerabilities.

When you apply a risk policy, the risk score of a vulnerability is adjusted, which allows administrators to prioritize more accurately the vulnerabilities that require immediate attention.

In the following example, the vulnerability risk score is automatically increased by a percentage factor for any vulnerability that remains active on your network after 40 days.

  1. Click the Vulnerabilities tab.
  2. In the navigation pane, click Manage Vulnerabilities.
  3. On the toolbar, click Search > New Search.
  4. In the Search Parameters pane, configure the following filters:
    1. Risk Equals High
    2. Days since vulnerabilities discovered Greater than or equal to 40
  5. Click Search and then on the toolbar click Save Search Criteria.

    Type a saved search name that is identifiable in JSA Risk Manager.

  6. Click the Risks tab.
  7. In the navigation pane, click Policy Monitor.
  8. On the toolbar, click Actions > New.
  9. In the What do you want to name this question field, type a name.
  10. In the Which tests do you want to include in your question field, click are susceptible to vulnerabilities contained in vulnerability saved searches.
  11. In the Find Assets that field, click the underlined parameter on the are susceptible to vulnerabilities contained in vulnerability saved searches.
  12. Identify your JSA Vulnerability Manager high risk vulnerability saved search, click Add, then click OK.
  13. Click Save Question.
  14. In the Questions pane, select your question from the list and on the toolbar click Monitor.
    Restriction: The Event Description field is mandatory.
  15. Click Dispatch question passed events.
  16. In the Vulnerability Score Adjustments field, type a risk adjustment percentage value in the Percentage vulnerability score adjustment on question fail field.
  17. Click Apply adjustment to all vulnerabilities on an asset then click Save Monitor.

On the Vulnerabilities tab, you can search your high risk vulnerabilities and prioritize your vulnerabilities.