02 Run and schedule a risk analysis

[ Applies to ] StorageGuard 9.2 and later  /  All supported storage, backup, SAN and cloud systems  /  Windows and Linux deployments

A risk analysis runs every check in your enabled baseline policies against the configuration data from the last scan, and opens a finding for each check that fails. It doesn't collect new data, so it should follow a scan. Run one now to see where you stand, then schedule it so findings stay current without anyone starting it by hand.

Choose how to run it

Option	Scans first?	Use it when
Security Risk Analysis task	No	You want to analyze everything now, on a schedule after a separate scan task, or again after changing policies or tuning checks.
Full Cycle task	Yes	You want scanning and analysis in one recurring task, the simplest setup. See Schedule a full cycle.
Scan and analyze risks on selected systems	Yes	Ideal for validating a fix, checking for regressions after environment changes, or evaluating a new custom check on a small number of systems.

Run or schedule a risk analysis

1. Go to Settings > Schedule.
2. Click + and select Security Risk Analysis.
3. Enter a Task Identifier, for example Weekly risk analysis.
4. In Time Zone, select the time zone the start time refers to.
5. Choose when it runs: One time for a single run, or Weekly schedule or Monthly schedule to keep findings current, and set the date or days and time. For a monthly task, Last runs on the last day of every month.
6. Click Save.
7. To start it right away, select the task and click Execute.

Follow progress in Task Manager on the Active tab. See Drill into a scan in Task Manager.

Use Execute again whenever you enable a policy, change its scope or tune checks. You don't need to scan again; the analysis uses the data from the last scan.

Scan and analyze selected systems

Go to Assets > Inventory, or the Systems page for the category, and select one or more systems. Use Ctrl or Shift to select several. Right-click and select Scan and analyze risks. StorageGuard runs a full scan and a risk analysis for the selected systems only.

Review the results

Where	What it tells you
Baseline Configuration > Overview	Your Baseline compliance score and Score by Policy, graded A to F, plus open findings by severity and technology, and your least compliant systems. A is above 90, B is 80 to 90, C is 70 to 80, D is 50 to 70, and F is below 50.
Baseline Configuration > Risks	Every open configuration finding, with severity, priority (P1 to P5), labels and assignee. Open one to see its description, impact, evidence and remediation steps.
Vulnerabilities > Overview	Findings from vendor advisories and CVEs, by severity, age and system.
Compliance	Pass and fail counts per check. Filter by policy or system type, and double-click a check for each system's result and evidence.
Assets > Overview	How many assets are compliant, vulnerable and analyzed.

Run or schedule a full cycle

1. Go to Settings > Schedule.
2. Click + and select Full cycle.
3. Enter a Task Identifier, for example Full scan and analysis.
4. In Time Zone, select the time zone the start time refers to.
5. Choose when it runs: One time for a single run, or Weekly schedule or Monthly schedule to keep findings current, and set the date or days and time. For a monthly task, Last runs on the last day of every month.
6. Under scope, select All items in scope to scan every enabled system, or Select Scope to pick systems, sites or CI groups.
7. Click Save. 
8. To start it right away, select the task and click Execute.

What happens to findings next

Status	Meaning
Open	StorageGuard found the issue.
Completed	Someone marked the finding as fixed. It closes if the next scan and analysis don't find it again.
Closed	The issue wasn't found in the latest analysis.
Reopened	An issue that was completed or closed was found again.
Suppressed	Someone chose to hide the finding, indefinitely or until a date.

For handling findings day to day, see Work with findings.

Send results automatically

Have StorageGuard email a report whenever an analysis finishes.

1. Go to Reports > Scheduling and click +.
2. In Name, select a report. Risk Summary gives an executive summary and a list of findings; Findings Summary lists findings that match your filters.
3. In Report output, select sending by email, then enter the Recipients, Subject and Body, and select the Report format.
4. Set the schedule to End of Security Risk Analysis.
5. Click Save.

Related articles

• Choose and create baseline policies
• Schedule recurring scans
• Tune risk detection