CAM Overview dashboard
The CAM Overview dashboard provides multiple tabs with reports on critical aspects of your CAM security posture.
Accessing the dashboard
Users with the CAM Administrator [sn_irm_cont_auth.admin] or Executive Reader (sn_irm_cont_auth.executive_read) role can view the tabs on the CAM Overview dashboard.
Users with the following roles can access the dashboard:
- CAM Administrator (sn_irm_cont_auth.admin)
- Executive Reader (sn_irm_cont_auth.executive_read)
- System Owner (sn_irm_cont_auth.system_owner)
- Information System Security Manager (sn_irm_cont_auth.info_system_sec_manager)
- Information System Security Officer (sn_irm_cont_auth.info_system_sec_officer)
To open the dashboard, navigate to All > Continuous Authorization & Monitoring > Analytics Dashboards > CAM Overview.
Tabs on the dashboard
Image omitted: cam-ovrvw-dashboard-washingtondc.gif
CAM Overview tabs
CAM Overview tabs
| Title | Type | Source table | Description |
|---|---|---|---|
| Authorization boundary tab | |||
| Boundaries connected to CMDB | Single Score | System elements [sn_irm_cont_auth_boundary_element] | The number of authorization boundaries defined to work with your CMDB. |
| Mission critical boundaries | Single Score | The number of authorization boundaries defined as being mission critical. For more information, see Define the authorization boundary. | |
| Orphan authorization boundaries | Single Score | The number of authorization boundaries not related to an authorization package. | |
| Boundaries status | Bar chart | The number of authorization boundaries in each state. | |
| Authorization packages tab | |||
| Packages with overridden impact | Single Score | The number of authorization packages with an impact that have been overridden. For more information, see RMF step 1 - Categorize the authorization package. | |
| Packages pending approval | Single Score | The number of authorization packages for which approval has been requested, but that haven’t yet received approval. | |
| Packages by impact | Bar chart | The number of authorization packages categorized by impact levels. | |
| Packages by step | Bar chart | The number of authorization packages categorized by steps (for example, Monitor, Access, Select, and so on). | |
| Baseline controls tab | |||
| Packages with inherited controls | Single Score | The number of authorization packages that contain baseline controls inherited from a common control. | |
| Packages with common controls | Single Score | The number of authorization packages for which common controls were created and implemented. | |
| Packages with unimplemented controls | Single Score | The number of authorization packages for which common controls were created, but haven’t yet been implemented. | |
| POA&M tab | |||
| Pending POA&Ms | Single Score | The number of Plans of Action and Milestones (POA&M) that are pending authorization. | |
| POA&Ms with milestones | Single Score | The number of POA&Ms that contain milestones. | |
| POA&Ms with acceptance tasks | Single Score | The number of POA&Ms that contain acceptance tasks. | |
| Overdue POA&Ms | Single Score | The number of POA&Ms that have overdue milestones or acceptance tasks. | |
| POA&Ms by state | Bar chart | The number of POA&Ms categorized by state. | |
| Packages with POA&Ms | Bar chart | The number of authorization packages that contain POA&Ms. | |
| POA&Ms by priority | Bar chart | The number of POA&Ms categorized by priority. | |
| POA&Ms by response | Bar chart | The number of POA&Ms categorized by responses. | |
| Assess activity tab | |||
| Inadequate engagements | Single Score | The number of engagements closed with an inadequate result. | |
| Satisfactory engagements | Single Score | The number of engagements closed with a satisfactory result. | |
| Adequate engagements | Single Score | The number of engagements closed with an adequate result. | |
| Controls by engagement | Bar chart | The number of controls categorized by engagements. | |
| Audit task breakdown | Bar chart | Audit tasks grouped or stacked, or both, by task type, assigned user, top task, or state. | |
| POA&M breakdown | Bar chart | POA&Ms grouped or stacked, or both, by engagement, state, or response. | |
| Control test results | Donut chart | The number of completed control tests, broken down by overall control effectiveness rating. | |
| Engagement results | Bar chart | An overall count of audit engagements conducted for each entity. The chart is stacked to display the overall audit results for each entity. | |
| Overdue audit tasks | List | List of open audit tasks that have exceeded the planned end date. |