Prioritization Overview
Prioritization helps you find and fix the vulnerabilities and misconfigurations that matter most in your environment. Instead of working through every finding, you focus on the ones that lower your risk the most.
Navigate to: Risk Management > Risk Workbench
In ETM, prioritization happens on the Risk Workbench tab. Risk Workbench is the name of the prioritization tab.
Why Prioritization Matters
Security teams often have more findings than they can fix. Prioritization helps you cut through the noise and act where it counts.
| Benefit | What It Means for You |
|---|---|
| Better use of resources | Spend your limited time and people on the most critical findings and the most important assets. |
| Better risk management | Narrow the list of open critical findings and assets with filters, and see the risk impact before you plan remediation or mitigation. |
| Easier compliance | Many regulations require you to fix critical vulnerabilities. When you focus on critical vulnerabilities and assets first, it is easier to meet these requirements. |
How Prioritization Works
You complete prioritization in five steps. Click a step to go straight to its instructions.
- Start prioritization from the Risk Workbench tab.
- Define the scope by selecting Business Entities or asset tags.
- Select a prioritization approach: use a ready-made template or build your own.
- Run prioritization to see the prioritized findings and the potential TruRisk reduction.
- Save the plan so you can track it, act on findings, and export the results.
The following image shows the end-to-end prioritization process.
For step-by-step instructions, see Prioritization Workflow.
Who Should Use Prioritization
| Role | How They Use Prioritization |
|---|---|
| Security analysts | Prioritize daily findings to address the most critical risks first. |
| Security managers | Monitor the overall risk posture and track remediation progress across the organization. |
| Compliance teams | Make sure critical vulnerabilities are found and fixed to meet regulatory requirements. |
Before You Begin
To define the scope of a plan, your assets must belong to at least one Business Entity or have tags assigned.
New to prioritization? Start with the Highest Risk Reduction template. It automatically picks the findings that lower your TruRisk score the most, so you can see results without building any filters.