Vulnerability Management - FAQ

1. Can I link a vulnerable asset to multiple C1Risk Assets/Groups? 

Yes! For example, you could link to the ‘Human Resources’ department, as well as the ‘Windows’ operating system asset types.

2. How often is vulnerability data updated? 

Vulnerability data updates each evening at 8:00 PM UTC and may take several hours (depending on your vendors API speed limits). You may request for an ad-hoc refresh by contacting your Customer Success Representative, support@c1risk.com, or by submitting a ticket through the help-desk platform.

3. How accurate is the vulnerability data in C1Risk?

The vulnerability data in C1Risk is sourced directly from your solution provider and will be as accurate as your solution provider’s data. However, please be advised that we do not include ‘information’ or ‘alert’ data that does not have a criticality rating. This is data such as ‘This asset is operating Windows 2013.’ We include only the related ‘vulnerability,’ if any, and not the associated ‘informational’ data items.

4. What do I do if I see an issue with my vulnerability data?

We recommend first comparing the data in C1Risk to your solution provider data. It is likely that the issue is with your solution provider and not C1Risk (see item 3, above). If you find an error or issue that seems to exist only in C1Risk, please submit a ticket through the help-desk platform, including a detailed description and applicable exports showing the problem.

5. I don’t see the Vulnerability Management module in my navigation pane. What do I do?

1. It is likely that your subscription to the module is not enabled or has not yet been paid for. If you have recently subscribed, please allow for the time estimated to enable your module provided by your Customer Success representative.

2. You may not have configured the integration yet. On the integrations page you will see a link to the vendor’s guidance for the integration, which may include a URL, username and password, or access and secret keys to be saved to the C1Risk Platform. Until an integration is successfully connected and verified, you will not see the module in the navigation pane.

3. If issues persist, please submit a ticket through the help-desk platform, including a detailed description and applicable exports showing the problem.

6. I don’t see my vulnerability management solution. Do you integrate with other providers?

Please contact your Customer Success Representative, support@c1risk.com, or by submitting a ticket through the help-desk platform.