diff --git a/x-pack/plugins/security_solution/public/detections/components/rules/step_about_rule/default_value.ts b/x-pack/plugins/security_solution/public/detections/components/rules/step_about_rule/default_value.ts
index 008040b271370..56c61c2ad6766 100644
--- a/x-pack/plugins/security_solution/public/detections/components/rules/step_about_rule/default_value.ts
+++ b/x-pack/plugins/security_solution/public/detections/components/rules/step_about_rule/default_value.ts
@@ -22,7 +22,7 @@ export const stepAboutDefaultValue: AboutStepRule = {
   isAssociatedToEndpointList: false,
   isBuildingBlock: false,
   severity: { value: 'low', mapping: fillEmptySeverityMappings([]), isMappingChecked: false },
-  riskScore: { value: 50, mapping: [], isMappingChecked: false },
+  riskScore: { value: 21, mapping: [], isMappingChecked: false },
   references: [''],
   falsePositives: [''],
   license: '',
diff --git a/x-pack/plugins/security_solution/public/detections/components/rules/step_about_rule/index.test.tsx b/x-pack/plugins/security_solution/public/detections/components/rules/step_about_rule/index.test.tsx
index f53aefc350ccc..cb25785eaa5b2 100644
--- a/x-pack/plugins/security_solution/public/detections/components/rules/step_about_rule/index.test.tsx
+++ b/x-pack/plugins/security_solution/public/detections/components/rules/step_about_rule/index.test.tsx
@@ -153,7 +153,7 @@ describe('StepAboutRuleComponent', () => {
       name: 'Test name text',
       note: '',
       references: [''],
-      riskScore: { value: 50, mapping: [], isMappingChecked: false },
+      riskScore: { value: 21, mapping: [], isMappingChecked: false },
       severity: { value: 'low', mapping: fillEmptySeverityMappings([]), isMappingChecked: false },
       tags: [],
       threat: [
@@ -262,7 +262,7 @@ describe('StepAboutRuleComponent', () => {
 
     const result = await formHook();
     expect(result?.isValid).toEqual(true);
-    expect(result?.data?.riskScore.value).toEqual(50);
+    expect(result?.data?.riskScore.value).toEqual(21);
 
     wrapper
       .find('[data-test-subj="detectionEngineStepAboutRuleSeverity"] [data-test-subj="select"]')