Out-of-the-Box Risk Score

In some use cases, it is hard to build complex Risk Score models from scratch without guidance. To help you get started, Axonius offers a predefined, out-of-the-box Risk Score which provides distinct, best-practice starting points through OOTB values.

Managing OOTB Risk Scores

OOTB Risk Scores are displayed on the Risk Score Table of each asset type as "Created by - Axonius".

There are two types of OOTB Risk Score for each asset type:

• Security Finding - Combines vulnerability-level context with asset-level context, which helps prioritize not only severe CVEs, but severe CVEs on important or exposed assets. The following parameters are considered:
  • Axonius Vulnerability Score (AVS): Integration of vulnerability severity.
  • Asset Criticality: Linkage to the dedicated Asset Criticality value.
  • Internet Exposure: Determined by the Query Wizard field Is Exposed to the Internet = Yes. This parameter is calculated by evaluating data from multiple sources, including Axonius fields and adapter-specific exposure indicators.
• Asset - Uses the highest open Security Finding Risk Score on the asset as the primary signal, while also accounting for the broader volume of open Security Findings on that asset.
  In other words, the Asset Risk Score reflects both the most severe current risk and the additional risk created when multiple findings exist on the same device.

General guidelines:

• OOTB Risk Scores cannot be renamed or deleted.

• The score type and calculation parameters of an OOTB Risk Score can be viewed but not edited.

• You can activate or deactivate OOTB Risk Scores according to your needs, just like custom Risk Scores.

• The following components can be edited in OOTB Risk Scores (marked in green in the image below):

  • The query selected for applying the Risk Score
  • Risk Levels