--- title: Configuring roll-up calculator rules description: Configure roll-up calculator rules to compute the cumulative risk score for remediation tasks and imported vulnerabilities.Create rules to roll-up risk scores on imported findings and remediation tasks. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/security-management/sem-configure-risk-rules.html release: australia topic_type: concept last_updated: "2026-03-12" reading_time_minutes: 2 breadcrumb: [Configure rules to manage findings, Implement, Unified Security Exposure Management, Security Operations] --- # Configuring roll-up calculator rules Configure roll-up calculator rules to compute the cumulative risk score for remediation tasks and imported vulnerabilities. **Parent Topic:**[Configure rules to manage findings](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/sem-configure-rules-manage-findings.md) **Related topics** [Prioritizing vulnerabilities and other findings using roll-up calculators](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/sem-prioritizing-vulnerabilities-other-findings.md) ## Create or edit roll-up calculator rules Create rules to roll-up risk scores on imported findings and remediation tasks. ### Before you begin Role required: See [Access control lists \(ACLs\) for administration rules](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/sem-acls-for-admin-rules.md) ### Procedure 1. Navigate to **Workspaces** > **Security Exposure Management Workspace**. 2. Select **Administration** in the navigation pane. 3. Select **Review** on the **Roll-up calculator rules** tile. 4. On the Rules page, select **Roll-up calculator** in the navigation pane. 5. Select **New** and fill in the fields on the form:
Field Description
Details
Name Name of the rule.
Target table Name of the table from which the risk score must be rolled-up.
Target field Name of the field from the table that must be considered for risk roll-up.
Active Indicates whether the rule is active.
Description Description of the rule.
Source selection
Applies to The finding table to which the risk score roll-up applies to. The **Applies to** field is dependent on the selected target table, and its options are updated accordingly. For instance, choosing the Container remediation task \[sn\_vul\_container\_vulnerability\] limits the **Applies to** field options to Container vulnerable item. This dynamic update ensures that only relevant options are available based on the target table selected.
Include Defines the conditions for roll-up on the finding table.
Roll-up calculations
Basic Assign weightage to specify the relative impact of each of the following factors on the rolled-up risk score:- **Maximum risk score**: Maximum risk score of the findings considered. - **Average score**: Aggregate of the risk scores of all the findings. - **Count of records**: Number of findings. A larger number of findings increases the overall score, while a smaller number lowers it.
Script \(Advanced option\) The scripting feature is an advanced feature to build a custom script that should return the risk score, which is an integer value ranging from 0 to 100.
6. Select **Save**.