Hey there,
In the Q4 2025 release of both VR and USEM (VR v30x), an enhancement was released that helps with this use-case.
We'd have to be using a versions of VR at or later than:
- 26.4.4 (Non-USEM), or 30.2.5(USEM)...
-- USEM Means VR v30x or later (the next evolution of VR)
-- VR v30.1.4 originally published on Dec 11, 2025, and was replaced with VR v30.2.5 to be the minimum version of USEM (VR v30x) with the Jan 20, 2026 Store App patch
In your Remediation Target Rules -> you can, optionally, setup a recalculation option.
You can change the behaviour, so that the Remediation Target Date on a VIT is re-evaluated, where the clock starts at the time of the Risk Rating being changed.
This is driven by the Risk Rating being changed on the VIT though (not the Risk Score); the Risk Score (0-100) ranges would would be key here. The VIT Risk Score would have to change "enough", such that the the respective Risk Rating is changed (driven by the Risk score ranges and thresholds).
- E.g. if the Risk score changes from 72 to 79, the Risk Rating will remain as 2-High (no change)
- E.g. if the Risk score changes from 72 to 91, the risk Rating will change from 2-High to 1-Critical
The first option (Default calculation) is a bit confusing
- If a Remediation Target Date has been set on a VIT, there is the nightly job that checks the VITs to see if a more aggressive rule applies to that VIT record (based on the rules you have setup), or if we used a field like "Last opened" to start the clock and the VIT Closes -> Re-opens again, this be used to start the clock again
