better explanation

This commit is contained in:
Beth Levin 2020-07-10 19:40:10 -07:00
parent 904dc39f02
commit 9a5933c861

View File

@ -145,9 +145,9 @@ When an exception is created for a recommendation, the recommendation is no long
The following list details the justifications behind the exception options: The following list details the justifications behind the exception options:
- **Third party control** - A third party product or software already addresses this recommendation - **Third party control** - A third party product or software already addresses this recommendation
- This justification type will give you point for completing the recommendation, which affects your exposure score and secure score - Choosing this justification type will lower your exposure score and increase you secure score because your risk is reduced
- **Alternate mitigation** - An internal tool already addresses this recommendation - **Alternate mitigation** - An internal tool already addresses this recommendation
- This justification type will give you point for completing the recommendation, which affects your exposure score and secure score - Choosing this justification type will lower your exposure score and increase you secure score because your risk is reduced
- **Risk accepted** - Poses low risk and/or implementing the recommendation is too expensive - **Risk accepted** - Poses low risk and/or implementing the recommendation is too expensive
- **Planned remediation (grace)** - Already planned but is awaiting execution or authorization - **Planned remediation (grace)** - Already planned but is awaiting execution or authorization