$60 Amazon Voucher for Insights: How Should Lansweeper Calculate Asset Risk Scores?

[MariaOrellana]

Hi Community! 

Take part in a 45 minute online interview with Lansweeper and receive a $60 Amazon voucher!

Your insights will directly influence the future development of Lansweeper. We're constantly striving to improve your experience with Lansweeper, and we'd love to hear your thoughts on how you prioritize your risks.

We're exploring the possibility of implementing an Asset Risk Score within Lansweeper and want to make sure it meets your needs. This interview is an opportunity to let us know how to prioritize the indicators that are most important to you.

Interested in contributing to the project? Please click here to fill in the registration form.

Thank you! 

[DonMario73]

Hi Maria, a vulnerability can be technically critical but doesn't deem urgent action if there is no exploit code available or if there is no malicious actor actively exploiting it.   Not all asset in a network are critical but critical vulnerabilities in assets connected to the internet need urgent attention.  Suggest to add an asset criticality field to identify such assets and use this value to calculate an overall score. 

[DonMario73]

Hi María, follows my suggestions:

• There should be an asset criticality score.
• There should be a way to prioritize risk based on ranges.  This will help to have an overall view of the Critical, High, Medium and Low risks of assets.
• Better diagrams like the followings https://patchapalooza.com/statistics
• A vulnerability scoring decisión like the one defined by CISA.

Regards

[MariaOrellana]

Hi @DonMario73,

Thank you for your feedback, it is very helpful.
I would like to discuss your suggestions further to understand how you would define asset criticality. Perhaps we can have a 30 minute research call to ensure we have clearly covered your input. Please opt in here.