SecurityInsight settings · Settings > Risk Analysis -- mails and executive view

Protection Score: accepted lifecycle for devices (days)

Key	SI_ProtectionScore_GraceDays_Device
Where	Settings > Risk Analysis -- mails and executive view > Protection score
Type	int
Default	30 days
Edition	Community

What it does

The protection score's accepted lifecycle for devices: how many days a Very High or High finding may be open before it counts in the "within Accepted Lifecycle" view.

When set

Only a PATCH finding (a vulnerability with a vendor fix: a fix release date, a recommended update or a patch cycle) gets this grace; every other finding has its own (SI_ProtectionScore_OtherGraceDays_*, default 0). A device patch finding younger than this (its age: the fix's release date, else the source's first-seen, else SI's first detection) does not lower the "within Accepted Lifecycle" protection score; the Actual Risks view always counts it. A finding with no date always counts. 0 = both views count it at once.

When blank or default

Left blank, the default applies: 30 days

Risk and how to reverse it

Changes how the headline figures are presented in the mails and the executive view; the findings themselves are unchanged. Reversible at once.

Requires

Nothing else.