Security Incident Calculators not working for me. What could I be doing wrong?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-18-2022 11:01 AM - edited 10-18-2022 12:09 PM
Hello team.
Quick (and maybe dumb!) question:
I'm trying different security incident calculators here to get fields set and to get a risk score. I've changed conditions, orders, etc and nothing seems to work. On my PDI, the one that always runs is the last one called 'Business Impact' which runs the 'Aggregate from Severity Calculators' calculator which runs a script include. And even when I turn that off (false), a new incident does not take from the security calculators before it.
What am I missing here?
- Labels:
-
Calculator
-
Security Incident Response
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-18-2022 12:14 PM
I think it's actually this one that's doing the calculation
With that being said, I would just disable the OOTB calculator groups and create your own for your org.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-18-2022 12:27 PM
I sort of thought so. But you can't disable the calculator groups, right? You have to disable all of the calculators and then create your own. Correct?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-18-2022 12:31 PM
You're right. Disable the calculators and create your own. You can leave the group and create your own calculator under the OOTB group.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-18-2022 12:43 PM
OK. So I disabled everything and created a single calculator group for a service. It apparently calculates the risk OK, but it doesn't change the business impact field to the value I entered in the calculator.
This is weird...and frustrating.