Defender Security Center recommendation impact score, how is it calculated?

Question

In Defender Security Center>Threat and Vuln Mgmt>Security Recommendations, when you select an individual recommendation, a card will appear, containing an "Impact Score". How does that individual impact score affect the overall Exposure Score in the Threat and Vuln Mgmt dashboard? If one recommendation has an impact of 10, and the recommendation is carried out on all devices is applies to, will it reduce the overal Exposure Score in the dashboard by 10?

Thanks

Answer 1

Hi，
The exposure score is continuously calculated on each device in the organization. It is influenced by the following factors:

• Weaknesses, such as vulnerabilities discovered on the device
• External and internal threats such as public exploit code and security alerts
• Likelihood of the device to get breached given its current security posture
• Value of the device to the organization given its role and content

The exposure score is broken down into the following levels:

• 0–29: low exposure score
• 30–69: medium exposure score
• 70–100: high exposure score

You can remediate the issues based on prioritized security recommendations to reduce the exposure score. Each software has weaknesses that are transformed into recommendations and prioritized based on risk to the organization.
Reference: https://learn.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/tvm-exposure-score

Best regards.

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.