Configuring and Calculating Risk Score

To configure and calculate the risk score:

Open the VRM - Calculate Turbine Risk Score component
Edit the Set Parameters Create Variable action.
To change weight:
1. Modify the weight value for any existing scoring object to an integer between 0 and 10.
To remove scoring objects from the calculation
1. Delete any of the objects within the finding_parameters parent object
To add a new scoring object
1. Create a new scoring object under the finding_parameters base object
2. Give it a unique name
3. Create a new integer value called “weight” and give it any value 0 or greater
4. Create a new integer value called “max_value” and assign the maximum value that the first can possibly have.
  1. For booleans, use 1 as a max_value.
Create a string value with the name of "key" and assign to it the field name from the vulnerability_finding object that is being added
Create a string value called "name" and assign the display name of the new scoring object.
If the new scoring object is a boolean, do the following:
Save the component.