Observations

Introduction

A non-biased discovery of something in an Organization’s security program that may need addressing. Important Observations may be elevated to a ‘Finding’.

Observation Details Page

Module

The module section is used to track what module the observation is linked to.

Finding/Observation

The finding/observation section is used to identify and elevate an observation to a finding. Findings are an observation that poses a larger threat to an organization's security.

Source

The source is where the observation originated from. The source would be entered into the observation details if the observation came from outside of the Rivial Application.

Management Response

Management response is used to record how management decides to respond to an observation or finding.

Risk

The risk section is used to log the level of risk involved with an observation. This is important to keep note of because it helps decide the impact observation has on an organization.

Notes

Record any extra information that may be relevant to observation, as well as keep track of user concerns and questions.