To resolve or close account compromise risk events, follow the steps below:

1. Go to Operations Dashboard > RISK REDUCTION MEASURES.
2. Click Risk Factor and filter "Account Compromise" events, then take the remediation steps to resolve the detected issues.
    

   Data in the Summary table is updated every 4 hours, while changes to asset details take effect immediately.

    

   

Typically, the backend system detects customer actions as soon as the related logs are synchronized with Trend Vision One. Then the backend will automatically close any account compromise risk events that occurred in the last 30 days within a few hours. However, there are situations where the related logs may not be sent to our backend due to unexpected issues. In such cases, and if you are certain that remediation actions have been taken, you can follow the steps below to remove unwanted account compromise risk events:

1. Go to Operations Dashboard > RISK REDUCTION MEASURES.
2. Click Risk Factor and filter "Account Compromise" events.
3. Click risk event name that you want to remove.
4. Choose the asset and change status to Closed, then Trend Vision One will no longer display the event, and the risk score will be recalculated.