{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":45187,"path":"security-management/sem-configure-risk-rules.md","title":"Configuring roll-up calculator rules","bundle":null,"doc_type":null,"release":"australia","body":"\n# Configuring roll-up calculator rules\n\nConfigure roll-up calculator rules to compute the cumulative risk score for remediation tasks and imported vulnerabilities.\n\n**Parent Topic:**[Configure rules to manage findings](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/sem-configure-rules-manage-findings.md)\n\n**Related topics** \n\n\n[Prioritizing vulnerabilities and other findings using roll-up calculators](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/sem-prioritizing-vulnerabilities-other-findings.md)\n\n## Create or edit roll-up calculator rules\n\nCreate rules to roll-up risk scores on imported findings and remediation tasks.\n\n### Before you begin\n\nRole required: See [Access control lists \\(ACLs\\) for administration rules](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/sem-acls-for-admin-rules.md)\n\n### Procedure\n\n1. Navigate to **Workspaces** > **Security Exposure Management Workspace**.\n\n2. Select **Administration** in the navigation pane.\n\n3. Select **Review** on the **Roll-up calculator rules** tile.\n\n4. On the Rules page, select **Roll-up calculator** in the navigation pane.\n\n5. Select **New** and fill in the fields on the form:\n\n\n
\n\nField\n\n\n\nDescription\n\n
\n\nDetails\n\n
\n\nName\n\n\n\nName of the rule.\n\n
\n\nTarget table\n\n\n\nName of the table from which the risk score must be rolled-up.\n\n
\n\nTarget field\n\n\n\nName of the field from the table that must be considered for risk roll-up.\n\n
\n\nActive\n\n\n\nIndicates whether the rule is active.\n\n
\n\nDescription\n\n\n\nDescription of the rule.\n\n
\n\nSource selection\n\n
\n\nApplies to\n\n\n\nThe finding table to which the risk score roll-up applies to.\n\n The **Applies to** field is dependent on the selected target table, and its options are updated accordingly. For instance, choosing the Container remediation task \\[sn\\_vul\\_container\\_vulnerability\\] limits the **Applies to** field options to Container vulnerable item. This dynamic update ensures that only relevant options are available based on the target table selected.\n\n
\n\nInclude\n\n\n\nDefines the conditions for roll-up on the finding table.\n\n
\n\nRoll-up calculations\n\n
\n\nBasic\n\n\n\nAssign weightage to specify the relative impact of each of the following factors on the rolled-up risk score:- **Maximum risk score**: Maximum risk score of the findings considered.\n- **Average score**: Aggregate of the risk scores of all the findings.\n- **Count of records**: Number of findings. A larger number of findings increases the overall score, while a smaller number lowers it.\n\n\n
\n\nScript \\(Advanced option\\)\n\n\n\nThe scripting feature is an advanced feature to build a custom script that should return the risk score, which is an integer value ranging from 0 to 100.\n\n
6. Select **Save**.\n\n\n"}}