Status and severities
Understand the states and severity levels displayed in the GRC and TIEM.
A status shows the current stage of an item. The severity indicates the priority of attention for a finding. These concepts are not equivalent and must be interpreted according to the module and the item displayed.
What you will do
You will identify the type of open item and consult the meaning of the status, classification or severity shown on the screen.
Who can do this
Anyone who consults the manual can use this reference. The display of items on the platform depends on the profile, the active organization and the available modules.
Before you start
- Confirm if you are in GRC or TIEM.
- Identify if the screen presents an evaluation, mission, execution, finding or report.
- Do not use the color alone. Also read the text displayed.
Menu path
In the manual, select Help and reference → Status and severities.
Steps
- Identify the module and the item that is being consulted.
- Locate the corresponding table on this page.
- Compare the visible text in the interface with the English description.
- Use the status to understand the item stage and the severity to prioritize the analysis of a finding.
Evaluation status in GRC
| Status | What does it mean |
|---|---|
| Draft | The evaluation has been created and is still in preparation. |
| In progress | The answers are being filled in. |
| Waiting for approval | The answers have been submitted and are awaiting a decision from an authorized profile. |
| Pending adjustments | The evaluation has been returned for corrections before a new submission. |
| Completed | The evaluation was approved and has a final result available. |
| Archived | The evaluation was removed from the list of active items and remains available in the corresponding history. |
In GRC, Progress shows how much of the assessment has been answered and Maturity shows the calculated result. Neither of the two represents severity.
Mission status in TIEM
| Status | What does it mean |
|---|---|
| Active | The mission is available for configuration, collection and consultation according to the user's permissions. |
| Disabled | The mission does not accept new collections while it remains disabled. |
| Archived | The mission was removed from active use and remains in the available historical context. |
Execution status in TIEM
| Status | What does it mean |
|---|---|
| In line | The collection has been requested and is waiting for the start. |
| In progress | The collection is being executed. |
| Executed | The collection has ended. Check the results and warnings presented. |
| Completed with errors | The collection ended, but one or more steps had an error. |
| Cancelled | The collection was interrupted before the normal completion. |
Within an execution, the Tasks, or collection steps, may appear as In queue, Running, Completed, Error or Cancelled. The state of a step does not replace the overall status of the execution.
Finding classification in TIEM
| Classification | What does it mean |
|---|---|
| Open | The finding still needs analysis. |
| Under review | The analysis of the finding is underway. |
| Reopened | The finding has returned for analysis after a change or new observation. |
| Revalidated | A new verification confirmed the follow-up of the finding. |
| Legitimate | The analysis confirmed that the finding represents a valid occurrence. |
| Mitigated | A measure has been recorded to reduce or treat the exposure. |
| Risk accepted | The organization decided to accept the risk after analysis. |
| False positive | The analysis concluded that the finding does not represent a valid occurrence for the context. |
Severity of finding in TIEM
| Severity | How to interpret |
|---|---|
| Informative | Useful context, no indication of urgency. |
| Low | Reduced impact or exposure. |
| Average | Requires evaluation and prioritization. |
| High | Requires priority attention. |
| Criticism | Requires immediate evaluation. |
Severity helps to order attention, but it does not alone confirm the real impact. Consider the evidence, the organization's context and the classification of the finding.
Report status
In the GRC, the visible states are:
| Status | What does it mean |
|---|---|
| Your report is being prepared | The generation has been requested and has not yet finished. |
| Report ready | The file is available for download. |
| It was not possible to generate the report | The attempt did not end successfully. |
| The download of this report has expired | The previous file is no longer available to download; generate another one when the action is available. |
In TIEM, the action of the report can show Preparing report data, Generating report, Downloading report or Generating again. These texts indicate, respectively, preparation, generation, availability of the file or need to create a new file.
Expected result
You recognize the stage of the item consulted, differentiate severity status and know when to wait, review information or prioritize a finding.
Common problems
| Situation | What to do |
|---|---|
| The text does not correspond to any table | Confirm the module and the type of item. Record the visible label and inform the divergence to the authorized person responsible for your organization. |
| The evaluation is completed, but the maturity does not appear | Update the page and confirm that the correct evaluation is open. If it continues to be unavailable, forward the evaluation name and the displayed text to the organization's responsible person. |
| The execution ended with errors | Open the visible warnings and errors of the execution. Share only the mission name, the approximate date and the message presented. |
| A finding has high severity, but it has already been mitigated | Read severity and classification together. Severity records the priority of the finding; classification records the current treatment or decision. |
| The report is still being prepared | Wait a few moments and refresh the query. If the status does not change, follow Report issues. |