Translations:Schwachstellen/132/en

Assigning deviations to a risk

A deviation is a review question with a negative answer. Specifically, HITGuard detects these negative answers as follows:
The target score is the defined target value that specifies the desired target state for review questions. It serves as a reference point to detect deviations from the ideal state. Every answer to an review question is compared with the target score. If the answer value is below the target score, the review question is considered a deviation. TO achieve this, the answers "Yes", "No" and "Partially" are translated into the numerical values "5", "1" and "3". You can define the target score in the management system.

Deviations are treated differently by HITGuard. For example, you can assign them to risks in step 4. HITGuard also detects over-fulfillments; these can be useful in opportunity management. To assign these, however, you have to navigate to Risk management > Vulnerabilities > Deviations