Set up custom check fields and labels

[ Applies to ] StorageGuard 9.2.9 and later  

Labels and custom fields add your organization's context to checks and findings. Both IT and security labels appear on findings; security labels also decide what your policies include. Custom fields capture metadata that StorageGuard doesn't track by default, such as an SLA or an exception reference, and show it in findings and reports.

Label types

StorageGuard uses two types of labels. Each is managed on its own page.

Label type	Attached to	Used for	Managed in
IT label (general)	Findings	Tagging findings, for example by technology, project or owning team. System labels, marked with a lock icon, show the technology.	Settings > Associations > Labels
Security label	Principles, checks and findings	Deciding which checks a policy includes. Usually a standard's section, a threat type or a priority group.	Baseline Configuration > Settings > Security labels

StorageGuard assigns labels to findings automatically. A finding typically gets one or two IT labels and a group of security labels.

Manage labels

You can add, edit and delete labels on each type's page. Predefined labels can't be removed.

Add a security label

1. Go to Baseline Configuration > Settings > Security labels.
2. Click + and enter a Name.
3. To use a color other than the default, pick a Color and click Apply.
4. Click Apply to save the label.

To change a security label's name or color, right-click it and select Edit. Hold Ctrl to edit several labels at once. To remove a label, right-click it and select Delete.

Add or edit an IT label

Go to Settings > Associations > Labels to add, edit or delete IT labels. You can also add one directly from a finding, as described below.

Assign security labels to checks

You can assign security labels to any check, built-in or custom, and remove them again.

1. Go to Baseline Configuration > Checks > Knowledge base.
2. Select one or more checks.
3. Click Assign labels.
4. Select the security labels to assign, or clear the ones to unassign, and click Apply.

Label a finding

1. Open the finding. In the Description section, click + next to the existing labels.
2. On the Risk labels tab, add labels from the list or create a new one, or choose labels to remove.
3. Click Apply.

Add custom check fields

Custom fields are user-defined fields on checks and findings, such as SLA (days), Compliance Tag or Severity Override Reason. They appear in the finding's details and in reports.

• For configuration checks and findings, go to Baseline Configuration > Settings > Custom fields.
• For vulnerability findings, go to Vulnerabilities > Settings.
• To fill in a field on a check, right-click the check in the Knowledge base and select Edit Custom Fields.

For field types and setup, see StorageGuard Custom Check Fields.

Related articles

• StorageGuard Custom Check Fields
• Create your own baseline policy
• Create custom checks