Before you start
- You need Security read access and Planner write access. Add to Planner only appears for roles with Planner write or manage access, and linking the findings needs Planner write access plus Security read access.
- Cork must be connected and the findings mapped to a company.
- All selected findings must belong to the same company.
Create a Planner item from findings
1
Open the findings
Open Security > Compliance for compliance events, Security > Vulnerabilities for software vulnerabilities, or Security > Endpoints for devices.
2
Select the rows
Check the box beside each finding you want to track. You can select several rows to create a single Planner item that tracks all of them.
3
Choose Add to Planner
Open Actions (N) in the page header and choose Add to Planner.
4
Review the draft
The Planner item dialog opens with a title, Description, Business Value, Due Date, and Private Notes already filled in. The status starts as Not Started, and the due date starts as today. Change Type, Status, Assignee, the dates, Est. Hours, the costs, the links, the custom fields, Hide from company users, or the notes as needed.
5
Save
Click Save. MSPortal shows Cork items added to planner.
6
Check the result in Planner
Open Planner, open the new item, and find Relationships. The findings appear under Cork Compliance Events, Cork Vulnerabilities, or Cork Endpoints.
What the draft contains
Compliance events
Vulnerabilities
Endpoints
For Acronis rows, the details go only into Private Notes. They are not linked under Cork Endpoints, because only Cork endpoints can be linked. Acronis does not report an OS version or last seen time, so those lines are left out.
Business Value
You can change Business Value before you save.
One finding or several
- One finding: the title is the CVE, event type, or device name, and the description covers that finding.
- Several findings: the title reads like Cork Vulnerabilities (5 items), Cork Compliance Events (3 items), or Cork Endpoints (2 items). Each finding is listed in Private Notes with a divider.
Tips for grouping
- Group vulnerabilities for the same software product.
- Group compliance events that affect the same device.
- Group findings that one action can fix.
- Start with Known Exploited and Critical vulnerabilities, then At Risk compliance events.
Troubleshooting
Frequently asked questions
Do several selected findings create several Planner items?
Do several selected findings create several Planner items?
No. They create one Planner item with links to every selected finding.
Does completing the Planner item fix the finding in Cork?
Does completing the Planner item fix the finding in Cork?
No. Planner tracks your work. Patching and resolving the finding happen in the provider, and the result shows up here after the next sync.
Can I rely on Hide from company users here?
Can I rely on Hide from company users here?
Yes. This shortcut saves it like the Planner page does. The box starts checked, so the item is hidden from company users unless you clear it.
Where do I see the linked findings later?
Where do I see the linked findings later?
Open the item in Planner and look under Relationships.
I am a company user. How do I ask for help with a finding?
I am a company user. How do I ask for help with a finding?
Describe it to the Home AI Assistant and confirm the request when prompted.