What is the Score Planner?
Score Planner lets you build or automatically generate a plan to improve your score while providing full transparency into how specific security issues impact your score. The tool helps you understand which issues to prioritize to achieve your desired security rating.
How it works
You can choose to automatically generate an action plan for issues that require remediation in order to reach your target letter grade. If this plan does not fully meet your security priorities, you can adjust it or create your own plan. SecurityScorecard will automatically calculate the minimum number of issues and findings within those issues that must be remediated to reach your target score. Once the plan is ready, you can download it as a CSV to conveniently include it in your issue tracking system.
Benefits
- Greater transparency into the impact of specific issue remediations
- A better understanding of which issues to prioritize to improve the score
- Information and tools required to boost the score to the desired level
- Enhanced vendor-customer collaboration to improve the cybersecurity posture
- Flexibility to select an automated or customized plan
- Ability to run interactive “what if” scenarios to determine the most effective remediation path
Step-by-step guide
Select the Issues tab on your own Scorecard and click Improve Your Score.
To automatically generate a plan, select your desired letter grade.
Click Generate Plan.
If you want to include different issues, simply click Adjust My Plan.
To create a customized plan from scratch, click Create Your Own Plan.
Drag and drop issues into your Score Plan to see how remediation of specific issues will impact your score.
Edit the number of findings you’ll remediate by hovering over the Remediating entry. You can pick the desired number, and the amount you’ll recover from your score will update accordingly.
Download your plan as a CSV.
For automatically generated plans, you may see only the specific findings for an issue that requires remediation to reach the target score – particularly for issues with many findings. When adjusting your plan or creating a new one, you can change the number of findings you plan to address.
Please note that the number of findings for an issue follows exponential growth. What that means is that if you remediate very few findings, you’ll see a really small score recovery, but as you remediate more and more, the amount you’ll recover will grow very quickly.
Some issues track status over time, such as particular issues within the Patching Cadence factor, for example. Because these issues age out, they cannot be immediately resolved (only refuted). As such, they are not included in automatically generated score plans.