Impacts Risk Vector Grade

Refer to the Impacts Risk Vector Grade (a.k.a. Impacts RV Grade) field to determine if the finding impacts the risk vector grade and filter findings.

Yes

The finding impacts grading.

No: Asset taken offline

The finding does not impact the risk vector grade since the asset was taken offline.

No: Delegated Control

The company is identified as having Delegated Security Controls. They have assets that are controlled by their customers.

No: Grace Period

There is a 60-day grace period when company-provided assets are added to infrastructure. The findings from the added infrastructure do not impact grading.

No: Guest Network Exclusion

The finding does not impact the rating calculation because it is associated with the organization’s guest network.

No: Lifetime Expired

The finding has completed its lifetime, is expired, and no longer impacts the rating.

An expired lifetime is indicated by the Remaining Lifetime column in the Findings Table being empty. Expired findings are kept for up to one year for reference.