SecurityInsight settings · Settings > Risk Analysis reports
High severity weight
| Key | SI_RiskReport_SeverityWeight_High |
|---|---|
| Where | Settings > Risk Analysis reports |
| Type | Number |
| Default | 5 (Critical is 10, Medium 2, Low 1) |
| Edition | Community |
What it does
Sets how heavily a High (or Medium-High) severity finding counts in the Risk Analysis score columns used for management reporting.
When set
A higher weight lowers the secure-score value of High findings and raises their share of the domain and overall scores. The original risk score columns are not affected.
When blank or default
Left blank, the default applies: 5 (Critical is 10, Medium 2, Low 1)
Risk and how to reverse it
Changes what the Risk Analysis reports show, how findings are filtered or scored, or where reports go, from the next run; earlier reports are unchanged. Hiding findings can make real exposure invisible to readers. Reversible: change it back.
Requires
Nothing else.
Recommended
Keep the default. Change it when: Most installs never should; change only to align the scores with your own risk model.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack