Editing Enforcement Actions in a Risk Score

All Risk Scores are Enforcement Sets. After creating them, you can edit them and add more actions and advanced configurations as in any Enforcement Set. All Risk Scores created on the Risk Score page are available in the Action Center as well, and vice versa.

To learn more about Enforcement Sets, see Enforcement Sets Page,Creating Enforcement Sets, and Managing Enforcement Sets.

To learn more about defining Risk Score using an Enforcement Action, see Axonius - Calculate Risk Score.

To navigate to a specific Risk Score's page in the Action Center, click the icon next to the Risk Score's name. From this page, you can do the following:

• Edit the Enforcement Set name (Risk Score name) or add a description to it. The new name will be displayed in the Axonius Risk Score page once you refresh it.
• Change the query (the assets this Risk Score applies to) under Run this Enforcement Set on assets matching the following query.

❗️

Note

You cannot change the query when it is associated with more than one Enforcement Action, meaning, if there is more than one action in the Enforcement Set - see example below. In this case, the query selection menu is disabled.

• Schedule the Enforcement Set runs.
• Configure Success, Failure, and Post Enforcement Actions. An Enforcement Set can include one or more Success, Failure, or Post Actions.
  • Success Actions run on each asset for which the main action completes successfully.
  • Failure Actions run on each asset for which the main action does not complete successfully.
  • Post Actions run on ALL assets matching the query after the main action has completed.

In the following example, an Add Custom Data to Assets success action is set to run on each asset for which the main action has calculated the Risk Score successfully. To learn more about this action, see Axonius - Add Custom Data to Assets.

You can add to each asset a custom field named Risk Score Exists. The field type is Single Value, the value type is Boolean, and the field value is Yes - indicating that all these assets have a Risk Score.

After any change you make to the Enforcement Set, make sure to click Save or Save and Run.