What parameter contributes to the magnitude score of an offense?

The magnitude of an offense in IBM QRadar is a calculated value from 0 to 10 that indicates its overall importance and helps prioritize security incidents. This score is determined by three primary parameters: Relevance, Severity, and Credibility. Credibility specifically measures the integrity and certainty of the offense. It is influenced by the reliability rating of the log source that reported the event and increases as multiple sources report the same event, indicating a higher likelihood that the attack is real and not a false positive.

A. Confidentiality: This is a fundamental principle of information security (part of the CIA triad), not a direct input parameter for the QRadar magnitude calculation.

B. Availability: This is a fundamental principle of information security (part of the CIA triad), not a direct input parameter for the QRadar magnitude calculation.

C. Integrity: While conceptually related, "Integrity" as part of the CIA triad is a security goal. "Credibility" is the specific, named parameter used in the QRadar magnitude formula.

1. IBM QRadar SIEM Documentation. "Offense magnitude." IBM, 2023. In the section detailing offense management, the documentation explicitly states: "The magnitude rating of an offense indicates the importance of the offense. The magnitude is calculated based on relevance, severity, and credibility." This document further defines Credibility as indicating "the integrity of the offense as determined by the credibility rating that is configured in the log source." (IBM Documentation, QRadar SIEM 7.5.0, "Offense magnitude").

2. IBM Security Learning Academy. "IBM QRadar SIEM Foundations - Module 5: Investigating an Offense." This official courseware explains the components of an offense. In the lesson on "Offense Details," it breaks down the magnitude calculation, identifying Relevance, Severity, and Credibility as the three core contributing factors. (IBM Security Learning Academy, Course: IQ110G, Module 5).