Configuring the User Risk Response Condition
Create a response rule that executes based on the user risk score.
You can create a user risk response condition when user risk detection is enabled.
You can configure the response rule condition to execute based on various user risk scenarios. For example, you can create a response rule to block a sensitive file transmission with the user risk score is greater than 80 and the content violates a PII policy.
- ClickManage > Policies > Response Rules, clickAdd Response Rule, and selectAutomated Response.
- Configure a response rule at theConfigure Response Rulescreen.For more information, see Configuring response rules.
- Select theUser Risk Scorecondition from theConditionslist.
- Select the user risk requirements to trigger actions. See the following table for a description of the condition parameters.ParameterInputDescriptionMatches ExactlyUser risk numberTriggers a response rule action if the user risk score matches.Is Greater ThanUser risk numberTriggers a response rule action if the user risk score is exceeded.Is Greater Than or EqualsUser risk numberTriggers a response rule action if the user risk score is met or exceeded.Is BetweenUser risk numberTriggers a response rule action when the user risk score is within the range of numbers specified.Is Less ThanUser-specified numberTriggers a response rule action if the user risk score is less than the specified number.Is Less Than or EqualsUser-specified numberTriggers a response rule action when the user risk score is equal to or less than the specified number.