The table below lists the attributes available for importing findings:
| Attribute | Description |
|---|---|
| *Name | Specify the name of the finding. |
| Control | Enter the title of the control to which you will associate a finding. When controls become non-compliant, you can specify for which controls the findings should be created. |
| Status | Enter the status of the finding when imported into the RiskVision application. Leaving this field blank will set the status to 'Open.' |
| Description | Any additional information that helps understand the purpose of creating a finding. |
| *Likelihood | Specify a value between 0 and 10 to provide an opinion as to how often the finding occurs. The value you specify here fetches a likelihood rating based on the threshold range configured on the Findings Configuration page. |
| *Impact | Specify a value between 0 and 10 to provide an opinion as to how the finding affects your organization. The value you specify here fetches an impact rating based on the threshold range configured on the Findings Configuration page. |
| Residual Likelihood | Specify a value between 0 and 10 to provide an opinion that after following certain procedures the chances of occurrence will subside. The value you specify here fetches an impact rating based on the threshold range configured on the Findings Configuration page. |
| Residual Impact | Specify a value between 0 and 10 to provide an opinion that if certain remediation procedures are followed the chances of occurrence will subside. The value you specify here fetches an impact rating based on the threshold range configured on the Findings Configuration page. |
| Owner | The owner is the user importing the findings into RiskVision application. |
| Team | Enter the team so that the finding can be worked on by a group of stakeholders. |
| Response Title | Enter the title for the response if you want to mitigate a finding using a response. |
| Response Action | Enter an action for the response. For example, if you are going to mitigate a finding's effect, the response action is usually set as 'Mitigate.' |
| Response Comment | Any additional information that helps understand the purpose of creating a response. |
| Response Owner | The user importing the findings into RiskVision application is the response owner. |
| Response Status | Enter the status of the response. Note that the status 'Implemented/Completed' mitigates the risk score of a finding. |
