Skip to content

Commit 003c2b8

Browse files
authored
change language to full risk acceptance
1 parent 9b9069b commit 003c2b8

1 file changed

Lines changed: 19 additions & 19 deletions

File tree

docs/content/triage_findings/findings_workflows/OS__risk_acceptance.md

Lines changed: 19 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -26,13 +26,13 @@ When a Finding is Risk Accepted, the following will occur:
2626
- The Finding’s status will be changed to “Risk Accepted.”
2727
- The Finding will no longer be counted toward Metrics, but will still appear within the Test it originated from.
2828

29-
Findings can be Risk Accepted in one of two ways: They can either be manually added to a **Linked Risk Acceptance**, or by using the **Simple Risk Acceptance** workflow.
29+
Findings can be Risk Accepted in one of two ways: They can either be manually added to a **Full Risk Acceptance**, or by using the **Simple Risk Acceptance** workflow.
3030

31-
### Linked Risk Acceptances
31+
### Full Risk Acceptances
3232

33-
A Linked Risk Acceptance allows Users to accept the risk of multiple Findings within an Engagement and bundle them into a single unit. If organizational policy requires formal, documented risk acceptances, or Users wish to trigger certain actions once a Risk Acceptance expires, Linked Risk Acceptances are the best choice, as they capture the internal decision-making process and can serve as a source of truth.
33+
A Full Risk Acceptance allows Users to accept the risk of multiple Findings within an Engagement and bundle them into a single unit. If organizational policy requires formal, documented risk acceptances, or Users wish to trigger certain actions once a Risk Acceptance expires, Full Risk Acceptances are the best choice, as they capture the internal decision-making process and can serve as a source of truth.
3434

35-
Each Linked Risk Acceptance adds additional context, such as:
35+
Each Full Risk Acceptance adds additional context, such as:
3636
- The name of the Risk Acceptance.
3737
- The owner of the Risk Acceptance.
3838
- The security recommendation and decision regarding how to handle the Finding(s).
@@ -43,37 +43,37 @@ Each Linked Risk Acceptance adds additional context, such as:
4343
- Whether the Finding’s status will return to “Active” upon expiration.
4444
- Whether the SLA will restart upon expiration.
4545

46-
Expiration is unique to Linked Risk Acceptances, and allows any Findings that have been Risk Accepted to be re-examined at an appropriate time. Once a Linked Risk Acceptance expires, any Findings will be set to Active again. If you don’t specify a date, the Default Risk Acceptance / Default Risk Acceptance Expiration date will be used from the System Settings page.
46+
Expiration is unique to Full Risk Acceptances, and allows any Findings that have been Risk Accepted to be re-examined at an appropriate time. Once a Full Risk Acceptance expires, any Findings will be set to Active again. If you don’t specify a date, the Default Risk Acceptance / Default Risk Acceptance Expiration date will be used from the System Settings page.
4747

48-
Importantly, as Linked Risk Acceptances are restricted to individual Engagements, there is no single section in which to view all Linked Risk Acceptances. They can only be viewed within the respective Engagement that includes the Findings that the Linked Risk Acceptance contains.
48+
Importantly, as Full Risk Acceptances are restricted to individual Engagements, there is no single section in which to view all Full Risk Acceptances. They can only be viewed within the respective Engagement that includes the Findings that the Full Risk Acceptance contains.
4949

50-
#### How to Create a Linked Risk Acceptance
50+
#### How to Create a Full Risk Acceptance
5151

52-
In order to create a Linked Risk Acceptance, navigate to the Engagement view and click the **+** symbol in the Risk Acceptance box.
52+
In order to create a Full Risk Acceptance, navigate to the Engagement view and click the **+** symbol in the Risk Acceptance box.
5353

5454
![image](images/OS_RA_image3.png)
5555

56-
From there, fill out the details of the Linked Risk Acceptance and select the Findings to be included. **Accepted Findings** contains a dropdown list of all available Findings to be added to the Risk Acceptance. The list of Findings within the Engagement will appear in descending order of severity (Critical Findings at the top, Low Findings at the bottom). If a Finding has been previously Risk Accepted, it will not appear in the dropdown list.
56+
From there, fill out the details of the Full Risk Acceptance and select the Findings to be included. **Accepted Findings** contains a dropdown list of all available Findings to be added to the Risk Acceptance. The list of Findings within the Engagement will appear in descending order of severity (Critical Findings at the top, Low Findings at the bottom). If a Finding has been previously Risk Accepted, it will not appear in the dropdown list.
5757

58-
Once completed, the Linked Risk Acceptance will appear within the Risk Acceptance box in the Engagement view.
58+
Once completed, the Full Risk Acceptance will appear within the Risk Acceptance box in the Engagement view.
5959

6060
A Risk Acceptance can also be created by clicking the **Add Risk Acceptance** button from within an individual Finding's ⋮ kebab menu.
6161

6262
![image](images/OS_RA_image7.png)
6363

64-
#### Interacting with Linked Risk Acceptances
64+
#### Interacting with Full Risk Acceptances
6565

66-
Once a Linked Risk Acceptance has been created, it can be opened to view the Findings that were added to it as well as any details that were input when it was created (e.g., the date, owner, decision, expiration, etc.).
66+
Once a Full Risk Acceptance has been created, it can be opened to view the Findings that were added to it as well as any details that were input when it was created (e.g., the date, owner, decision, expiration, etc.).
6767

68-
To remove a Finding from a Linked Risk Acceptance, click the **Remove** button within the Findings Accepted table.
68+
To remove a Finding from a Full Risk Acceptance, click the **Remove** button within the Findings Accepted table.
6969

7070
![image](images/OS_RA_image8.png)
7171

72-
The Linked Risk Acceptance's view also includes a table at the bottom for all other Findings from Tests within that Engagement. From there, you may select additional Findings and add them to that Linked Risk Acceptance.
72+
The Full Risk Acceptance's view also includes a table at the bottom for all other Findings from Tests within that Engagement. From there, you may select additional Findings and add them to that Full Risk Acceptance.
7373

74-
Additionally, there is a Notes function that allows Users to include additional context to the Linked Risk Acceptance. All public notes will appear in any Reports that are generated for the Linked Risk Acceptance, whereas notes that are toggled as **Private** will not appear in reports.
74+
Additionally, there is a Notes function that allows Users to include additional context to the Full Risk Acceptance. All public notes will appear in any Reports that are generated for the Full Risk Acceptance, whereas notes that are toggled as **Private** will not appear in reports.
7575

76-
Importantly, if a Linked Risk Acceptance is deleted entirely, the Findings within will have their status automatically reverted to “Active.”
76+
Importantly, if a Full Risk Acceptance is deleted entirely, the Findings within will have their status automatically reverted to “Active.”
7777

7878
### Simple Risk Acceptances
7979

@@ -92,10 +92,10 @@ A Simple Risk Acceptance can be performed in either one of two ways:
9292

9393
Once a Finding has been Simple Risk Accepted, it will still appear in the Test's Findings table, but the status will be changed to **Inactive, Risk Accepted.** A complete list of individual risk-accepted Findings is viewable in the **Risk Accepted Findings** submenu of the **Findings** section in the sidebar.
9494

95-
If you Simple Risk Accept a Finding and later wish to add it to a Linked Risk Acceptance, the Risk must be unaccepted prior to adding it to a Linked Risk Acceptance.
95+
If you Simple Risk Accept a Finding and later wish to add it to a Full Risk Acceptance, the Risk must be unaccepted prior to adding it to a Full Risk Acceptance.
9696

9797
### Risk Acceptance Best Practices
9898

99-
As a standard practice, it is generally preferable to use either Linked Risk Acceptances or Simple Risk Acceptances exclusively, rather than leveraging both.
99+
As a standard practice, it is generally preferable to use either Full Risk Acceptances or Simple Risk Acceptances exclusively, rather than leveraging both.
100100

101-
For example, if Linked Risk Acceptances are the default approach, if a Finding is Simple Risk Accepted, it may cause confusion if there is no associated Linked Risk Acceptance that contains the affected Finding. Similarly, if Findings are typically Simple Risk Accepted, it may also create confusion to then add some Findings to a Linked Risk Acceptance when there are no such objects for most other Findings.
101+
For example, if Full Risk Acceptances are the default approach, if a Finding is Simple Risk Accepted, it may cause confusion if there is no associated Full Risk Acceptance that contains the affected Finding. Similarly, if Findings are typically Simple Risk Accepted, it may also create confusion to then add some Findings to a Full Risk Acceptance when there are no such objects for most other Findings.

0 commit comments

Comments
 (0)