Overview
The Risk Score Settings page is found by navigating to Administration > Settings > Risk Score Settings. This page allows you to configure various settings relating to your accounts risk score calculations.
Click to jump to your desired section:
Risk Score tab
The Risk Score tab allows you to configure the following:
- Customize factor weights - Dictates the proportion at which the individual factors are weighed in the final risk score. These factors include Phishing Simulation, Training Engagement, and Security Signals. Please note that the total weight of all three factors must add up to 100, and any factor can be set to 0 (assuming that the rest add up to 100).
- Customize level scores - Allows you to set custom ranges for what makes a given score "high", "low", etc. Further, you can customize the color of each risk score (the default for Critical Risk is a dark red, for instance) as well defining the range for each level (e.g., setting 60-100 as "high" risk), along with the name of each level category.
Exposure tab
The Exposure tab allows you to configuring the following Dark Web Monitoring settings:
- "Have I Been Pwned" toggle: When toggled on, this will scan against the HIBP breach dataset. Further, selecting from the dropdown will allow you to dictate the cadence of these scans.
Finding Rules tab
The Finding Rules tab displays a table containing all Risk Score scoring rules, and allows you to configure them.
The table contains:
- Rule name - Name of the rule.
- Risk Score Factor - Factor type of the given rule.
- Description - Description of the rule.
- Integrations - Any integrations associated with the rule.
- Score - How the rule will influence scoring.
- Actions - Allows you to edit or delete the rule.
Please note that the score follows golf-style rules (the lower the score the better). I.e., things that increase risk add to the score, and things that reduce risk are subtracted from the score.