On a weekly or monthly basis, review and update inactive risks. Inactive risks are included in default views and reports, and they count toward your risk score. Reviewing inactive risks helps maintain an accurate risk score.

1. Sign in to the Risk Dashboard.
2. In the navigation menu, click Risks.
3. In the Filters section, click Clear Filters, and then configure these settings:
   • State — Add these filters:
     • Open
     • Acknowledged, In-Planning
     • Mitigation/Fix in Progress
     • Fixed, Waiting Validation
     • Unsuccessful Validation
   • Status — Add the Inactive filter.
4. Review the inactive risks, and then do one of these actions:
   • Change the State of all Inactive risks.

     See Edit the state of inactive risks for more information.

   • Manually review an individual Inactive risk, and then update it with the appropriate State.

     See Edit the state of inactive risks for more information.

   • Take no action. 90 days after the risk was last detected, the Status automatically changes to:
     • Obsolete — If the device is offline.
     • Mitigated — If the device is no longer detected.
     Note:

     Obsolete and Mitigated risks are removed from the default view and the risk score calculation.