Home
Managing application risk
Follow this workflow to manage application security risks in your organization.
Step 3: Determining risks and prioritizing vulnerabilities
Learn how to determine risks and prioritize vulnerabilities identified in an application.
Determining risk
Now that management and security analysts have a comprehensive view of the applications across the enterprise, it's time to get a complete picture of the application security risk. Use formulas to create rules for automated application asset classification. The automated calculation of an application security risk rating is based on the application's description and discovered vulnerabilities.
Modifying formulas
You can modify AppScan Enterprise's built-in formulas to customize them for your business needs. For example, the Open Issues formula includes new, open, and reopened issues in its calculations. That might not fit with your requirements, so you can modify it to only include open and reopened issues.

Modifying formulas

You can modify AppScan Enterprise's built-in formulas to customize them for your business needs. For example, the Open Issues formula includes new, open, and reopened issues in its calculations. That might not fit with your requirements, so you can modify it to only include open and reopened issues.

About this task

This task follows a scenario of modifying the Open Issues formula. Use it as a starting point to modify other formulas.

Procedure

On the Portfolio tab of the Monitor view, click Edit Application Profile Template.
Scroll down to the Open Issues formula attribute and click Edit.
In the Edit Attribute Formula window, remove status=new and click OK.

Note: Everything that uses the Open Issues formula changes; most notably, the Open Issues and the Applications with Open Issues charts in the dashboard.