User risk scores imported from ICA are displayed incorrectly

Products

• Data Loss Prevention
• Information Centric Analytics

Issue/Introduction

After adding Information Centric Analytics (ICA) as a data source in Symantec Data Loss Prevention (DLP) and importing user records, all imported records are displayed as expected on the User List page (Incidents > Users > User List) in the Enforce console; however, not all user risk scores appear on the User Risk Summary page (Incidents > Users > User Risk Summary) despite users having generated incidents and all filters on the page are disabled. Most risk scores are displayed as 'N/A'.

Incident snapshot pages also display a risk score of 'N/A', or a value that differs from those displayed for users on the User Risk Summary page.

Environment

Release : 16.0.x

Resolution

This behavior has been corrected in DLP 16.1.

For DLP 16.1 and later releases, user risk scores should not be associated with incidents that were generated prior to adding ICA as a user data source in DLP.