Monitoring risk change

Create a dashboard item that shows policy risk change for selected assets, policies, and policies groups on a daily, weekly, and monthly basis.

About this task

Use this dashboard item to compare changes in the Policy Risk Score, Policies Checks, and Policies values for a policy group over time.

The Risk Change dashboard item uses arrows to indicate where policy risk for selected values that increased, decreased, or stayed the same over a chosen time period:

  • The number beneath the red arrow indicates the values that show an increased risk.
  • The number beneath the gray arrows indicates the values where there is no change in risk.
  • The number beneath the green arrow indicates the values that show a decreased risk.

Procedure

  1. Click the Dashboard tab.
  2. On the toolbar, click New Dashboard.
  3. Type a name and description for your historical policy compliance dashboard.
  4. Click OK.
  5. On the toolbar, select Add Item > Risk Manager > Risk Change.

    Risk Manager Dashboard items are displayed only when IBM QRadar Risk Manager is licensed.

  6. On the header of the new dashboard item, click the yellow Settings icon.
  7. From the Policy Group list, select the policy groups that you want to monitor.
  8. Select an option from the Value To Compare list:
    • If you want to see the cumulative changes in importance factor for all policy questions within the selected policy groups, select Policy Risk Score.
    • If you want to see how many policy checks changed within the selected policy groups, select Policies Checks.
    • If you want to see how many policies changed within the selected policy groups, select Policies.
  9. Select the risk change period that you want to monitor from the Delta Time list:
    • If you want to compare risk changes from 12:00 a.m. today with yesterday's risk changes, select Day.
    • If you want to compare risk changes from Monday 12:00 a.m. this week with last week's risk changes, select Week.
    • If you want to compare risk changes from the 12:00 a.m. on the first day of the current month with last month's risk changes, select Month.
  10. Click Save.