Managed Risk


Risk Dashboard

Updated Jan 25, 2024

Risk State and Status lifecycles

Generally, the State of a risk is manually set by the Risk Dashboard administrator and the Status of a state is automatically set by the system based on certain conditions. But, the system automatically sets the State of a risk to Unsuccessful Validation if the State was previously Fixed, Waiting Validation and then the risk was detected again during the next scan.

The lifecycle of the risk State and Status is different depending on the Source that discovered the risk:

Tip: For all three risk sources, you can remove the risk from the list of actionable risks and from the risk calculation by changing the State to Accepted or False Positive.

See Risk states and Risk statuses for more information.

Risks discovered using Arctic Wolf Agent

When Arctic Wolf® Agent discovers a risk, the risk Source is Agent. Each newly discovered risk has a State of Open and a Status of Active. During the next monthly scan:

Risks discovered using EVA scanning

When a risk is discovered using EVA scanning, the risk Source is EVA. Each newly discovered risk has a State of Open and a Status of Active. During the next monthly scan, if the risk is no longer found, the Status automatically changes to Mitigated. The State remains as Open, even though the risk is mitigated because this value is manually set.

Risks discovered using IVA scanning

When a risk is discovered using IVA scanning, the risk Source is IVA. Each newly discovered risk has a Status of either: