Prioritization Workflow With TruRisk Eliminate

The prioritization workflow helps you move from a broad set of findings to a clear, actionable list of the most important items to address. 

Prerequisite

The availability of Elimination-specific capabilities depends on TruRisk Eliminate licensing and subscription.

Workflow Overview

1. Start Prioritization
2. Define the Scope
3. Select a Prioritization Approach
4. Run Prioritization
5. Review Prioritized Results
6. Save the Plan

1. Start Prioritization

Navigate to Risk Management > Risk Workbench and click Start Prioritizing.

2. Define the Scope

• Select one or more Business Entities.
• Or click Choose Tags Instead to prioritize tagged assets.
  • Click Choose Tags Instead. The Select Tags dialogue box is displayed.
  • Select the desired tags and then click Add Tag.

3. Select a Prioritization Approach

Decide the prioritization approach to discern and filter the findings requiring immediate attention. To do this effectively, structure the approach based on certain  filters :

Highest Risk Reduction

Use the default template when you want the system to automatically prioritize findings that provide the greatest reduction in organizational risk.

Create a Custom Template

You can prioritize active vulnerabilities and misconfigurations on-demand across tagged assets or selected Business Entities.

1. Click Let Me Decide.
2. Add Common, Vulnerability, and Misconfiguration filters.
   • Common Attributes: These filters  are common across both the finding types (vulnerabilities and misconfigurations)
   • Vulnerabilities: These filters are only applicable to vulnerabilities.
   • Misconfigurations: These filters are only applicable to misconfigurations.

   

3. Expand each filter type and then drag and drop the desired filters to build your custom template.
4. Click Add.
5. Click Save as Template if you desire to save this custom template for future use.
6. In the Save Filter As A Template dialog box, enter the Name and Description of the template and click Save.

   The saved template is displayed on the Select Prioritization Approach page.

4. Run Prioritization

Click Prioritize Now. The application calculates the prioritized findings and projected TruRisk reduction. If calculations continue in the background, informational status messages are displayed until processing completes.

5. Review Prioritization Results

After the calculation completes, review:

• Preview Mode banner indicating the plan has not yet been saved.
• Impact cards showing Critical Assets, Critical Findings, and Highly Reliable Patches.
• Potential TruRisk Reduction showing the projected score improvement.
• Findings table with severity, technology, impacted assets, lifecycle, and elimination options.
• Elimination Options to review available remediation methods.
• Group By, Filters, and Search to further refine findings.

6. Save the Plan

1. Click Save Prioritization Plan.
2. Enter a name and description.

The saved plan is displayed on the prioritization listing page on the Risk Workbench tab.

7. Move the plan to the Eliminate Remediation 

Your prioritization plan is ready to hand off to IT Operations. Save the plan to create an Elimination Plan in TruRisk Eliminate to manage remediation activities and track progress.

Export Results

You can download the Prioritization report from hamburger menu. The generated report includes enhanced, plan‑level contextual details, such as:

• Plan title and description
• Scope and applied filters
• CVSS metadata
• Vulnerability count
• Impacted findings
• Asset details and asset IDs
• Additional relevant metadata

Improvement from the Traditional Prioritization Plan

The risk reduction view is updated with a more comprehensive impact section that highlights the following features.

Enhancement	Description
Static Plan Scope	The scope of a Prioritization Plan is  locked at the time of creation. Assets and findings included during plan creation remain fixed. Newly discovered assets or findings matching the same tags are not automatically added to the plan. This enables accurate progress tracking and reporting throughout the lifecycle of the plan.
Remediation Owner Column	You can assign a Remediation Owner when handing off a plan to operations teams, providing clear accountability for remediation activities.
Plan Progress Column	A new Plan Progress column displays the percentage of findings remediated through TruRisk Eliminate.
Enhanced Impacted  Findings	A redesigned Impact section provides a consolidated view of Critical Assets, Critical Findings, and Available Patches.
Remediation Insights	View remediation and patch information for prioritized findings to identify available actions and monitor remediation activities.
Performance Trending	Monitor remediation performance over time with trend reports for open findings, fixed findings, and remediation progress.
Prioritization Plan Details	The Plan Details page includes key impact information, including affected critical assets, critical findings, and available patches within the selected scope.
Findings Listing	The Findings table displays available remediation and patch options for eligible findings.
Elimination View	A dedicated Elimination view provides visibility into remediation activities, including available and applied remediation, associated CVEs, and remediation status