As an organization, we would like the ability to choose an alternative final risk calculation method.
So, InfoAsset Planner currently only provides the user one way of calculating a final risk score from chosen COFs and LOFs, and that is to sum the scores from all that are included in that risk model.
It would great if the user could choose the maximum score from all COFs or LOFs used in the particular risk model. Further, a button that reports the source of the score would be helpful in tracking and documenting the source of that dominant COF/LOF.
Chris Brothers
shared this idea
-
Bradley Nissley
commented
Hello Chris,
I've recently been working on a similar problem where the integrated risk score is not as "linear" as the COF or LOF wizard will allow. I was pointed towards Data Miner (Operation Center/Data Miner) which allows a bit more customization. I'm still not 100% sure it will do what I need it to do but might be worth having a look if you get the chance.
For my recent example I needed to calculate an aggregate COF from more than two COFs. In Data Miner I created a Join block between the two COFs and an output that calculated a Select Case: (CASE WHEN COF1 + COF2 >= 5 THEN 5 WHEN COF1 + COF2 = 0 THEN 1 ELSE COF1 + COF2 END). That output is put through to another Join block with COF3 through to another Join block with COF4 et cetera.
My initial reaction is that I would like to be able to calculate COFs, LOFs and Risks as a multi=parameter formula or even directly with SQLite (perhaps as an advanced option in the wizard). If Data Miner doesn't do what I need I'll put it through as a feature request.
https://help.innovyze.com/display/infoassetplanner/Data+Miner
Kind Regards, Brad