SecurityInsight settings · Settings > Risk Analysis reports
Critical finding weight
| Key | SI_RiskReport_SeverityWeight_Critical |
|---|---|
| Where | Settings > Risk Analysis reports |
| Type | Number |
| Default | 10 |
| Edition | Community |
What it does
How heavily a Critical finding lowers the score in the management risk score (on a 0 to 10 scale, where 10 is the full penalty).
When set
A lower value makes Critical findings pull the domain and overall scores down less. Values above 10 act as 10. The original per-finding risk score is not affected.
When blank or default
Left blank, the default applies: 10
Risk and how to reverse it
Changes what the Risk Analysis reports show, how findings are filtered or scored, or where reports go, from the next run; earlier reports are unchanged. Hiding findings can make real exposure invisible to readers. Reversible: change it back.
Requires
Nothing else.
Recommended
Keep the default. Change it when: Rarely; only to tune the management score to your own risk appetite.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack