Using Fix Intelligence for Security Exposure Management

Once Fix Intelligence for SEM is installed and configured, use Fix records to review the remediation actions available in your instance. Prioritize work by the risk each fix removes, and move between a fix and the findings and assets it resolves.

Overview of using Fix records

After Fix Intelligence for SEM is installed and configured, use the following capabilities to work with the fixes it ingests.

• Understanding Fix records

  Learn what a Fix record represents and how to interpret its key fields.

• View fixes in USEM Workspace

  View the fixes Fix Intelligence for SEM has ingested, along with the findings and assets each one resolves, in Unified Security Exposure Management Workspace.

• Prioritize remediation by fix

  Prioritize remediation by focusing on the fixes that resolve the most findings and remove the most risk.

• Group findings by fix

  Group the findings that share a fix into a single remediation task.

• Fix links on findings and vulnerabilities

  See which fix resolves a finding directly from the finding or vulnerable item.

• Understanding Fix records
  A Fix record represents a single remediation action that resolves one or more findings. Understanding its key fields helps you interpret what a fix does and how much risk it removes.
• View fixes in USEM Workspace
  Open the Fix list and form in Unified Security Exposure Management Workspace to review the fixes that Fix Intelligence for SEM has identified, and see the findings and assets each one resolves.
• Prioritize remediation by fix
  Use the Fix data and Security Exposure Management dashboards to focus first on the fixes that resolve the most findings and remove the most risk.
• Group findings by fix
  Use a remediation task rule to group the findings that share a fix, so your team can remediate them together as a single unit of work.
• Fix links on findings and vulnerabilities
  Fix Intelligence for SEM adds a read-only Fix reference to vulnerable items and vulnerabilities, so you can see which fix resolves a given finding directly from the finding.