SecurityInsight settings · Settings > Risk Analysis -- mails and executive view

Protection Score: grace for identity findings (days)

Key	SI_ProtectionScore_OtherGraceDays_Identity
Where	Settings > Risk Analysis -- mails and executive view > Protection score
Type	int
Default	0 days: it counts from the day it is found
Edition	Community

What it does

How many days a Very High or High identity finding (MFA, roles, sign-ins, attack paths -- anything that is not a patch) may be open before it counts in the "within Accepted Lifecycle" view.

When set

0: such a finding is a risk from day one in both views. A higher number gives it a grace (its age: the source's first-seen, else SI's first detection); a finding with no date always counts.

When blank or default

Left blank, the default applies: 0 days: it counts from the day it is found

Risk and how to reverse it

Changes how the headline figures are presented in the mails and the executive view; the findings themselves are unchanged. Reversible at once.

Requires

Nothing else.