SecurityInsight settings · Settings > Risk Analysis reports
Tier 3 score multiplier
| Key | SI_RiskReport_TierMultiplier_T3 |
|---|---|
| Where | Settings > Risk Analysis reports |
| Type | Number |
| Default | 0.5 (half a Tier 2 asset) |
| Edition | Community |
What it does
Sets how much a finding on a Tier 3 (least critical) asset counts in the Risk Analysis domain and overall scores.
When set
A higher value gives low-criticality assets more influence on the domain and overall scores; a lower value nearly ignores them. The original risk score columns are not affected.
When blank or default
Left blank, the default applies: 0.5 (half a Tier 2 asset)
Risk and how to reverse it
Changes what the Risk Analysis reports show, how findings are filtered or scored, or where reports go, from the next run; earlier reports are unchanged. Hiding findings can make real exposure invisible to readers. Reversible: change it back.
Requires
Nothing else.
Recommended
Keep the default. Change it when: Most installs never should; change only if your tier model weighs assets differently.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack