Skip to content
  • There are no suggestions because the search field is empty.

CORA Exposure

The CORA Exposure page in Nipper OmniSight gives a holistic, latest-only view of your DISA STIG compliance posture, with a specific focus on KIORs (Key Items Of Risk) — the subset of STIG failures deemed most critical to remediate.

Key Capabilities

At-a-glance summary cards showing:

  • Number of devices assessed, and how many have STIG failures / KIORs
  • Total STIG failures and total KIORs
  • Average STIGs and KIORs per device
  • Percentage of devices failing STIG compliance / with KIORs
  • Overall KIOR Score (calibrated by segment multipliers, see below)

Breakdown Charts

Visual breakdowns of KIOR exposure by:

  • KIOR
  • KIOR Family
  • Vendor
  • Operating System
  • Severity (CATI / CATII / CATIII)

Segment KIOR Score Multipliers

Some devices carry greater risk due to their position in the network (e.g. boundary devices). To reflect this, you can assign a score multiplier to a label/segment:

  • Select a label and enter a whole-number multiplier, then click Save.
  • Each KIOR found on a device with that label is multiplied accordingly when calculating the overall KIOR Score.
  • Existing multipliers can be removed at any time.

Filtering by Label and Segment

As with other dashboards, results can be refined using labels and a match condition:

  • Match all – results containing all selected labels
  • Match any – results containing at least one selected label
  • Match exact – results matching the exact label set

Assessed Devices

A paginated table lists every assessed device, showing its Repository, Segment, OS, Version, and counts of STIG Failures and KIORs.

Device Drill-down

Clicking a device name navigates to its dedicated Device page, showing:

  • A device summary (Name, Repository, Labels, OS, Version)
  • A findings table listing every STIG failure for that device (Rule ID, Rule Name, STIG ID, KIOR, KIOR Family, Title, Description)

The CORA Exposure page helps you:

  • Identify which STIG failures represent genuine Key Items of Risk
  • Prioritize remediation using a calibrated, segment-aware KIOR Score
  • Understand exposure across network segments without leaving the platform
  • Drill down from a high-level score straight to the evidence and guidance needed to remediate