The Risk Exchange module replaces the original User Risk Exchange and Application Risk Exchange workflows. This new module is designed to ingest risk scores from one or multiple plugged-in vendors related to users, devices, and applications. It creates a single, unified view of individual contributors to the company’s overall risk score. Its rules-based engine matches single or multiple vendor scores, or a derived weighted score, to trigger notifications and drive highly-focused orchestrated actions to reduce the risk from individual users, devices, or applications.
Click play to learn how to set up Risk Exchange to drive zero trust enforcement inside Netskope.
Risk Exchange Global Settings
Only write-access users can change Risk Exchange Global Settings. After the Risk Exchange module is enabled (Settings > General), go to Settings > Risk Exchange. There are four tabs: General, Logs Cleanup, Flap Suppression, and Records Cleanup.
On the General tab, you can enable generating alerts that are shared with the Ticket Orchestrator module. Select the maintenance window time interval and days, and during this time interval, Risk Exchange actions (that are configured to be performed in the maintenance window) will be performed.
On the Logs Cleanup tab, you can specify how often to delete logs.
On the Flap Suppression tab, you can prevent an action from being triggered multiple times in a short duration.
On the Records Cleanup tab, set the option to enable/disable data purging, and then set a time duration for the records to remain inactive. After that, the duration records will be deleted from Cloud Exchange as specified.
To learn how to trigger a Ticket Orchestrator alert using Risk actions, watch this video.
- Configure 3rd-party Risk Exchange Plugins
- Schema Editor
- Records
- Manage Risk Exchange Business Rules
- Map a Risk Exchange Business Rule to an Action
- Perform an Action on an Entity Field
- Actions
- Action Logs
- Approve or Decline Pending Actions
- Revert Successful Actions
- Risk Exchange Custom Plugin Developers Guide
- Risk Exchange Archive