000032657 - Archer Office Average Risk Score formula is incorrect in Continuous Monitoring and Federal Enterprise Management solutions in RSA Archer

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support on Sep 17, 2019
Version 3Show Document
  • View in full screen mode

Article Content

Article Number000032657
Applies ToRSA Product Set: Archer
RSA Version/Condition: through 6.0
IssueOut of the box, the formulas are as follows:

Application: Office
Field: Office Average Risk Score
Formula: AVERAGE(

REF([Hardware],[Host Anti-Virus Score]),
REF([Hardware],[Host Computer Password Age Score]),
REF([Hardware],[Host Patch Score]),
REF([Hardware],[Host Security Compliance Reporting Score]),
REF([Hardware],[Host Security Compliance Score]),
REF([Hardware],[Host Vulnerability Score]),
REF([Hardware],[Total Host Risk Score]))

Application: Hardware
Field: Total Host Risk Score

Formula: SUM(

[Host Security Compliance Score],
[Host Vulnerability Score],
[Host Patch Score],
[Host Computer Password Age Score],
[Host Standard Operating Environment Score],
[Host Security Compliance Reporting Score],
[Host Vulnerability Reporting Score],
[Host Anti-Virus Score])

Since the Total Host Risk Score field in Hardware already contains many of the Risk fields from the Hardware application, the Office Average Risk Score does not need to include them again in its formula.
CauseThis field contains an incorrect formula out of the box.
ResolutionChange the formula of the field to match what is shown below.

Application: Office
Field: Office Average Risk Score
Formula: AVERAGE(REF([Hardware],[Total Host Risk Score]))

This was reported as software defect ARCHER-24235 (Office Average Risk Score formula is incorrect in "Continuous Monitoring) / FEMv2

This has been fixed in RSA Archer 6.1.