Prioritization Workflow

Use this workflow to find the vulnerabilities and misconfigurations you should fix first, based on business context, risk, and the remediation options available. At the end, you have a saved plan that you can act on and export.

Navigate to: Risk Management > Risk Workbench

Workflow at a Glance

Click a step to go to its instructions.

1. Start Prioritization
2. Define the Scope
3. Select a Prioritization Approach
4. Run Prioritization
5. Save the Plan

After you save the plan, you can act on findings and export the results.

Before You Begin

Make sure your assets belong to at least one Business Entity or have tags assigned. You need one of these to define the scope.

1. Start Prioritization

Navigate to Risk Management > Risk Workbench and click Start Prioritizing.

2. Define the Scope

Choose which assets to include in the plan. Do one of the following:

• To use Business Entities: Select one or more Business Entities.
• To use tags:
  1. Click Choose Tags Instead. The Select Tags dialog box appears.
  2. Select the tags you want and click Add Tag.

3. Select a Prioritization Approach

Choose how ETM decides which findings need attention first. You can use a ready-made template or build your own.

Compare Templates Before You Pick One

The Select Prioritization Approach page shows the scope you selected and its current TruRisk score at the top. Each template card shows:

• A short description of the template.
• Assets: How many assets in your scope match the template, for example, 14 of 29.
• Findings: How many findings in your scope match the template, for example, 869 of 1.49K.

Use these counts to compare templates side by side and pick the one that fits your goal. These templates include the templates that Agent Sara Chat Now uses.

To see all templates in a table, click View All. The TruRisk Score column shows the score for each template.

In earlier releases, the TruRisk Score column was named Risk Reduction.

Use the Highest Risk Reduction Template

Use this default template when you want ETM to automatically prioritize the findings that reduce your organization's risk the most.

If you are not sure which template to use, start here. You can always create a custom template later.

Create a Custom Template

Build your own template to prioritize active vulnerabilities and misconfigurations on demand across the tagged assets or Business Entities you selected.

1. Click Let Me Decide.
2. Expand a filter type, then drag and drop the filters you want into your template. The filter types are:
   • Common Attributes: Filters that apply to both vulnerabilities and misconfigurations.
   • Vulnerabilities: Filters that apply only to vulnerabilities.
   • Misconfigurations: Filters that apply only to misconfigurations.

   

3. Click Add.
4. (Optional) To reuse this template later, click Save as Template.
5. In the Save Filter As A Template dialog box, enter a Name and Description, and click Save.

   The saved template appears on the Select Prioritization Approach page.

4. Run Prioritization

Click Prioritize Now. ETM calculates the prioritized findings and the projected TruRisk reduction.

The Potential TruRisk Reduction card shows the date of the current score, for example, Score as of October 5, 2026. While ETM calculates the projected score, the card shows Computation in progress. The calculation usually takes about 2–3 minutes.

Status Messages You May See

If the calculation continues in the background, ETM shows a status message so you know what is happening.

When	Message
While you create a plan	Save the updated plan and you will be able to see potential risk reduction once recalculations are complete.
After you save the plan	Your plan has been saved. Recalculation is in progress, and your updated TruRisk™Risk score will appear shortly.
On the Risk Workbench listing page, during recalculation	An information message appears for plans whose projected score is still being calculated.
When you open a saved plan whose score is still being calculated	Your saved plan is being recalculated. The updated TruRisk™Risk score will be available soon.
After the calculation is complete	You can view the projected score on the Risk Workbench tab. The score appears along with the formula if TruRisk V2 is enabled.

5. Save the Plan

1. Click Save Prioritization Plan.
2. Enter a name and description, and save the plan.

The saved plan appears on the prioritization listing page on the Risk Workbench tab.

Use a name that describes the scope and goal, for example, "Finance servers – critical vulnerabilities". This makes the plan easy to find later on the listing page.

Act on Prioritized Findings

Select findings on the Risk Workbench tab, then use the Actions menu or the Quick Actions menu.

Action	Purpose
Accept Risk	Accept the business risk.
Mark False Positive	Exclude invalid findings.
Add Supporting Artifacts	Attach evidence or documentation.
Launch TruConfirm Assessment	Check whether a finding can actually be exploited.

Export Results

Download the prioritization report from the hamburger menu. The report includes plan-level details, such as:

• Plan title and description
• Scope and applied filters
• CVSS metadata
• Vulnerability count
• Impacted findings
• Asset details and asset IDs
• Other related metadata

Related Topics

• Prioritization Overview
• Understand Risk Prioritization
• Understand the Risk Workbench
• Prioritization Workflow With TruRisk Eliminate