mirror of
https://github.com/prowler-cloud/prowler.git
synced 2026-07-23 20:42:02 +00:00
docs: brand tone and writing style fixes (#11953)
Co-authored-by: mintlify[bot] <109931778+mintlify[bot]@users.noreply.github.com>
This commit is contained in:
@@ -2,18 +2,16 @@
|
||||
title: "Prowler ThreatScore Documentation"
|
||||
---
|
||||
|
||||
|
||||
|
||||
|
||||
## Introduction
|
||||
|
||||
The **Prowler ThreatScore** is a comprehensive compliance scoring system that provides a unified metric for assessing your organization's security posture across compliance frameworks. It aggregates findings from individual security checks into a single, normalized score ranging from 0 to 100.
|
||||
Prowler ThreatScore is a comprehensive compliance scoring system that provides a unified metric for assessing security posture across compliance frameworks. It aggregates findings from individual security checks into a single, normalized score ranging from 0 to 100.
|
||||
|
||||
### Purpose
|
||||
- **Unified View**: Get a single metric representing overall compliance health
|
||||
- **Risk Prioritization**: Understand which areas pose the highest security risks
|
||||
- **Progress Tracking**: Monitor improvements in compliance posture over time
|
||||
- **Executive Reporting**: Provide clear, quantifiable security metrics to stakeholders
|
||||
|
||||
- **Unified view:** A single metric represents overall compliance health.
|
||||
- **Risk prioritization:** Highlights which areas pose the highest security risks.
|
||||
- **Progress tracking:** Monitors improvements in compliance posture over time.
|
||||
- **Executive reporting:** Delivers clear, quantifiable security metrics to stakeholders.
|
||||
|
||||
## How ThreatScore Works
|
||||
|
||||
@@ -29,7 +27,7 @@ Pass Rate = (Number of PASS findings) / (Total findings)
|
||||
The total number of checks performed (both PASS and FAIL) for a requirement. This represents the amount of evidence available - more findings provide greater confidence in the assessment.
|
||||
|
||||
### 3. Weight (`weight_i`)
|
||||
A numerical value (1-1000) representing the business importance or criticality of the requirement within your organization's context.
|
||||
A numerical value (1-1000) representing the business importance or criticality of the requirement within the organizational context.
|
||||
|
||||
### 4. Risk Level (`risk_i`)
|
||||
A severity rating (1-5) indicating the potential impact of non-compliance with this requirement.
|
||||
@@ -380,7 +378,7 @@ This comprehensive example demonstrates how:
|
||||
|
||||
### Example 4: Impact of Parameter Changes
|
||||
|
||||
Using the scenario, let's see how parameter changes affect the score:
|
||||
Using the scenario, the following changes show how parameter adjustments affect the score:
|
||||
|
||||
#### Scenario A: Increase Encryption Risk Level
|
||||
|
||||
|
||||
Reference in New Issue
Block a user