Skip to main content

Managing risks

Display additional information

To view additional information about a specific finding in a side panel, locate it in the grid and click anywhere on its row, except the Affected resources column.

The panel displays specific information that varies based on the type of risk and the related data available.

Display affected resources

When viewing risks in any grid, you can display a full list of affected resources by clicking on the corresponding value under the Affected resources column.

This will display the Affected resources sidebar:

era_sidepanel_affected_resources_937306_en.png

Clicking on the menu button next to any resource will provide you with the following options:

  • View resource - This option opens the Resources page in a new tab, where filters will be automatically configured to display only the selected resource.

  • View incidents - This option opens the Incidents page in a new tab, where filters will be automatically configured to display all incidents where this resource was involved.

Risk mitigation (fixing risks)

Risk mitigation involves taking action to remediate the source of the detected vulnerability. This may involve actions such as changing settings, updating software, modifying policies, changing passwords, and more.

There are several ways you can resolve a risk:

  • Automatic mitigation - You can use this option to create a task that will automatically make the necessary modifications to fix the issue. This option is available only for findings.

  • Manual mitigation - This option needs to be performed manually. Specific threats needs actions taken that can not be automated. The steps required to fix the risk can be found in the Additional information side panel, under the Risk mitigation section.

  • Patch app - This option automatically updates the app to the latest available version that fixes the vulnerability.

    For this option to be available, the following requirements must be met:

    • Your license must include access to the Patch Management feature.

    • The endpoint where the risk was detected must have the Patch Management module installed.

    • The endpoint where the risk was detected must have a policy installed that has the Patch Management feature enabled.

    • An update must be available that includes a fix for the detected vulnerability.

Important

After fixing a risk, a new scan may not immediately reflect the update. It can take up to an hour for the changes to be accurately detected.

Roll back fixes

Mitigation for specific risks also comes with a reverse option. After applying a fix for a finding or a resource, you can use the Roll back risk option to automatically reverse all changes performed by the Fix risk task.

To perform a roll back fix, follow these steps:

  1. Identify the risk using one of the sections from Risk Management.

  2. Select the corresponding checkbox under the first column on the grid. You can select multiple risks.

  3. Click the Fix risk button on the top of the list and select Roll back fixes.

    era_roll_back_937306_en.png

Alternatively, you can click the Roll back fix button located in the Additional information panel, under the Risk mitigation section.

era_roll_back_panel_937306_en.png

Ignore risks

If there are certain risks that you feel cannot be resolved at the moment, you can temporarily remove them from the list of displayed risks to reduce the clutter. Doing this will also remove from the risk from the data processed by the Risk Management Dashboard.

You can do this using these steps:

  1. Find the risk using one of the Risk Management pages.

  2. Select the corresponding checkbox under the first column on the right side of the page. You can select multiple risks.

  3. Click the State button on the top of the list and select Ignore threat.

    era_ignore_risk_937306_en.png

Alternatively, you can click the Ignore threat button found in the Additional information panel, under the Risk mitigation section.

Note

You can reverse this action by repeating the process, selecting the Restore ignored risks option instead.

Work with Watchlists

Watchlists are default smart views that start off as empty and provide you with a way of tracking high priority risks. Each page under the Risk Management section has it's own watchlist.

To add a risk to a watchlist follow these steps:

  1. Find the risk using one of the Risk Management pages.

  2. Select the corresponding checkbox under the first column on the right side of the page. You can select multiple risks.

  3. Click the Watchlist button on the top of the list and select Add to watchlist.

    era_add_to_watchlist_937306_en.png

Alternatively, you can click the Add to watchlist button found in the Additional information panel, under the General section.

Note

You can reverse this action by repeating the process, selecting the Remove from watchlist instead.

To view a watchlist, click the Watchlist option under the Default section in the Smart views panel.

era_view_watchlist_937306_en.png
In this section: