Configure the Foundation

When you sign in to ETM for the first time, you configure the foundation that ETM uses to calculate and present risk. The foundation includes your company information, your company risk appetite, and the settings that influence how the TruRisk Score is calculated.

Only a superuser can complete the onboarding wizard. Until onboarding is complete, only the Customer Onboarding page is available.

Onboarding Wizard Steps

In the onboarding wizard, a superuser completes the following steps. The other ETM tabs become available after the Connectors step is finished.

Company Profile: Define your company information and company risk appetite.
Business Entities: Organize your environment into business entities such as departments, subsidiaries, and regions.
Connectors: Connect ETM to your security and infrastructure data sources.

Configure Company Information

On the Company Profile step, provide the following information:

Company details such as Registered Company Name, Website URL, Industrial Sector, and Employee Count.
The location of your company headquarters, selected from the Country, State, and City lists.

For detailed steps, see Set up Enterprise Profile.

Configure Risk Appetite

Risk appetite is the level of risk that your organization accepts. ETM compares TruRisk Scores with the risk appetite to show which areas need attention.

Company risk appetite: On the Company Profile step, turn on the Risk Appetite toggle to define the TruRisk Score threshold for your organization. After onboarding, you can change it in Configuration > Company Profile.
Business entity risk appetite: Set the risk appetite of each business entity when you create or edit the entity.

Qualys recommends a risk appetite of 400, which is also the value ETM uses for a business entity that has no risk appetite set. For more information, see Risk Appetite.

Configure Risk Parameters

After onboarding, you can adjust how ETM calculates the TruRisk Score:

Asset criticality: ETM derives the Asset Criticality Score (ACS) from the criticality of the tags assigned to an asset or from an AI-recommended value. See View or Create Asset Tags.
Risk and compensatory factors: Go to Risk Management > Risk Customization to configure custom risk factors and compensatory factors. See TruRisk™ Customization.

Next Step