Risks and risk acceptance
The definition of a risk in Advisor, how to read severity and impact, and when to accept a risk instead of fixing it.
A risk is a rule that a zone's configuration does not meet. Each risk states its severity, the points the score gains once it is fixed and how to fix it.
Where a risk comes from
On each collection, Advisor compares every zone's configuration with the rules of the Maturity Score. Every rule with status Não conforme (Non-compliant) or Parcial (Partial) becomes an open risk on the Risks screen. When the configuration is fixed in Cloudflare, the risk leaves the queue on the next collection and shows up under Evolução (Evolution).
Severity
| Severity | How to read it |
|---|---|
| Crítica (Critical) | Exposure to handle first. The menu shows how many critical risks are open. |
| Alta (High) | Relevant protection gap. |
| Média (Medium) | Important improvement, no immediate exposure. |
| Baixa (Low) | Best-practice fine-tuning. |
Impact
Impacto no score (Score impact) shows how many points the score gains once the rule passes. Severity indicates how serious the risk is. Impact indicates how many points the score gains. To plan fixes, sort the queue by severity to reduce exposure or by impact to raise the score.
What a risk panel shows
| Section | Content |
|---|---|
| Valor observado (Observed value) | What the collection found in the zone. |
| Por que corrigir (Why fix it) | The practical effect of the gap. |
| Remediação guiada (Guided remediation) | Numbered steps to fix it in the Cloudflare dashboard. |
| Regra (Rule) and Impacto no score | The rule identifier and the points at stake. |
Accept a risk
Accept a risk when it is known and tolerated, for example a test zone. Acceptance removes the rule from the score calculation and records who accepted it and why.
- Go to Riscos (Risks) and select the risk.
- Select Aceitar risco (Accept risk).
- Fill in Justificativa (obrigatória) (Justification, required).
- (Optional) Set Expira em (Expires on). After that date, the rule counts toward the score again.
- Select Aceitar risco.
The rule becomes Ignorada (Ignored) and the screen shows the confirmation "Risco aceito. A recomendação saiu do cálculo do score." (Risk accepted. The recommendation left the score calculation.)
Other ways to accept
| Where | Action | Scope |
|---|---|---|
| Zone score panel | Ignorar recomendação (Ignore recommendation) | One rule in the zone |
| Zone score panel | Ignorar zona (Ignore zone) | Every open rule in the zone, with one justification for all |
| Zone Registros DNS (DNS records) tab | Ignorar melhoria (Ignore improvement) | Only that record for that rule |
To undo the acceptance, select Restaurar (Restore) or Restaurar regra (Restore rule). The rule counts toward the score again.
Who can accept
Accepting and restoring require the posture.ignores.write permission, included in the Tenant Admin role. Refer to Roles and permissions.