Cloud Infrastructure Tool Mapping

The table below shows the triage and severity status mappings for all of the Cloud Infrastructure tools that are supported by Software Risk Manager.

Tools are listed alphabetically. Tool results are mapped to the Software Risk Manager status shown at the top of each column. (A blank cell indicates that an equivalent status value is unavailable or undefined.)

Table 1. Severity Mapping
Cloud Infrastructure Tool Critical High Medium Low Info Unspecified
Prisma Cloud (RedLock) critical high medium low informational
AWS Security Hub* critical, 80+ high, 60–...–79 medium, 40–...–59 low, 20–...–39 informational, 0–...–19
Azure Security Center critical high medium low informational
Check Point CloudGuard Critical High Medium Low Informational
Microsoft Defender for Cloud Critical High Medium Low
Wiz CRITICAL HIGH MEDIUM LOW INFORMATIONAL
Table 2. Triage Status Mapping
Cloud Infrastructure Tool Ignored False Positive To Be Fixed Mitigated Fixed Reopened
Prisma Cloud (RedLock) Snoozed
AWS Security Hub* suppressed notified resolved
Azure Security Center
Check Point CloudGuard
Microsoft Defender for Cloud
Wiz

*AWS reports risk through a ranking [1–100] and a severity level [low, medium, etc.]. Both are listed.