CORA Exposure
The CORA Exposure page in Nipper OmniSight gives a holistic, latest-only view of your DISA STIG compliance posture, with a specific focus on KIORs (Key Items Of Risk) — the subset of STIG failures deemed most critical to remediate.
Key Capabilities
At-a-glance summary cards showing:
- Number of devices assessed, and how many have STIG failures / KIORs
- Total STIG failures and total KIORs
- Average STIGs and KIORs per device
- Percentage of devices failing STIG compliance / with KIORs
- Overall KIOR Score (calibrated by segment multipliers, see below)
Breakdown Charts
Visual breakdowns of KIOR exposure by:
- KIOR
- KIOR Family
- Vendor
- Operating System
- Severity (CATI / CATII / CATIII)

Segment KIOR Score Multipliers
Some devices carry greater risk due to their position in the network (e.g. boundary devices). To reflect this, you can assign a score multiplier to a label/segment:
- Select a label and enter a whole-number multiplier, then click Save.
- Each KIOR found on a device with that label is multiplied accordingly when calculating the overall KIOR Score.
- Existing multipliers can be removed at any time.
Filtering by Label and Segment
As with other dashboards, results can be refined using labels and a match condition:
- Match all – results containing all selected labels
- Match any – results containing at least one selected label
- Match exact – results matching the exact label set
Assessed Devices
A paginated table lists every assessed device, showing its Repository, Segment, OS, Version, and counts of STIG Failures and KIORs.

Device Drill-down
Clicking a device name navigates to its dedicated Device page, showing:
- A device summary (Name, Repository, Labels, OS, Version)
- A findings table listing every STIG failure for that device (Rule ID, Rule Name, STIG ID, KIOR, KIOR Family, Title, Description)

The CORA Exposure page helps you:
- Identify which STIG failures represent genuine Key Items of Risk
- Prioritize remediation using a calibrated, segment-aware KIOR Score
- Understand exposure across network segments without leaving the platform
- Drill down from a high-level score straight to the evidence and guidance needed to remediate