Using the default Vulnerability Response dashboards
The Vulnerability Response overview dashboard (Vulnerability Management) provides an executive view into vulnerabilities and vulnerable items, helping the Vulnerability Admin pinpoint areas of concern quickly. The Vulnerability Response remediation dashboard (Vulnerability Remediation) allows a remediation specialist to focus on the remediation tasks and vulnerable items they own.
Data visualizations in the Vulnerability Response Workspaces
The Vulnerability Response Workspaces include data visualizations that can help you monitor your remediation progress. You can determine the threat level to your organization by viewing the number and severity of active vulnerabilities that are important to your organization on dynamic data visualizations that are updated as vulnerability data changes. See Vulnerability Response Workspaces, Vulnerability Manager Workspace and Exploring the IT Remediation Workspace for more information about the dynamic data visualizations that are available.
Vulnerability analysts can also use default Vulnerability Response dashboards.
Roles required: sn_vul.vulnerability_admin, sn_vul.vulnerability_analyst, and users with sn_vul.vulnerability_read (or who inherit the sn_vul.vulnerability_read role), and pa_viewer.
The default Vulnerability Response dashboards in the legacy environment
These reports are included as part of the Performance Analytics for Vulnerability Response application and do not require a separate subscription. To open one, select the choice list to expand it and choose a dashboard. Alternatively, enter the name of a dashboard in the search field.
Vulnerability Response dashboards drop-down menu
Note:
When the Performance Analytics Content Pack for Vulnerability Response application is installed and activated, the Vulnerability Management (PA) dashboard, is displayed automatically in the Overview module. This dashboard contains reports covering all stages of the vulnerability management life cycle.
For information on the reports included in the Performance Analytics Content Pack for Vulnerability Response, see Vulnerability Management [PA] dashboard.
For information about the CISO dashboard and Scan Coverage reports, see Vulnerability Management CISO dashboard.
Vulnerability Management dashboard
In each chart, you can point to any part of a chart (bar, pie, data point, and so on) to view general data specific to that part. If you click any part of a report, a list opens to provide detailed information.
Note:
If customized dashboards are needed, see Create and use dashboards for more information.
Sample Vulnerability Response report
| Name | Visual | Description |
|---|---|---|
| Open Vulnerable Items by CI | Bar | Displays the number of open vulnerable items recorded for each configuration item \(CI\), from most to least. |
| Vulnerable Items by Remediation Target Status | Bar | Displays the number of Vulnerable Items that are Approaching Target, In-flight, and Past Target. Note: Items in the Deferred, Resolved, or Closed state are not included. |
| Deferred Vulnerable Items Expiring this Week | Graph | Displays the number of deferred vulnerable items scheduled to be reactivated within seven days. |
| Open Vulnerable Items by Vulnerability | Bar | Displays the number of open vulnerable items for each vulnerability, from most to least. |
| Vulnerabilities by Model | Bar | Displays the number of vulnerable items recorded for each model \(CI class\), from most to least. |
| Vulnerabilities by Week | Trend | Displays the number of vulnerability entries recorded each week. |
| Most Vulnerable Models | Donut | Displays models \(CI classes\) with the most vulnerable items. |
| Vulnerabilities by Publisher | Bar | Displays the number of vulnerable items recorded for each publisher, from most to least. |
| Vulnerabilities by Impact | Bar | Displays the number of vulnerability entries for impacted network types. |
| Most Vulnerable Publishers | Donut | Displays publishers with the most vulnerable items. |
| Most Vulnerable CIs | Donut | Displays CIs with the most vulnerable items. |
| Vulnerabilities by Score | Bar | Displays the number of vulnerability entries by vulnerability scores. |
| Reopened Vulnerable Items | List | Lists the reopened vulnerable items and their age. |
| Most Vulnerable CIs by Class | Donut | Displays CIs with the most vulnerable items. |
| Vulnerable Item Age | List | Lists the number of days since vulnerable items were last opened. |
| CIs with Vulnerability by Date | List | Lists configuration items that have been scanned within the last 30 days. |
| CIs not Scanned | List | Lists configuration items that have never been scanned for vulnerabilities. |
Vulnerability Remediation dashboard
Starting with version 19.0 of Vulnerability Response, this dashboard is available in the New Experience UI.
Note: If you are on Tokyo, you can view the dashboards in the Next Experience UI but with some functional loss.
The Vulnerability Remediation dashboard contains the following tabs: Assigned to My Groups, Assigned to Me, and Requested by Me. The Assigned to My Groups and Assigned to Me tabs show the same reports. The former tab reports by the assignment groups you belong to, and the latter by vulnerable items or remediation tasks that are assigned to you. The Requested by Me tab reports the false positives and exceptions you requested.
Vulnerability remediation dashboard with the Requested by Me tab
Vulnerability Remediation dashboard example
Reports
| Name | Visual | Description |
|---|---|---|
| Vulnerable Items by Risk Rating | Bar Image omitted: column-icon.png Bar icon | Number of active vulnerable items grouped by risk rating over the selected time span. |
| Closed Vulnerable Items by Remediation Target Status | Bar Image omitted: column-icon.png Bar icon | Number of Closed vulnerable items grouped by remediation target status over the selected time span. |
| Remediation Tasks by State | Bar Image omitted: column-icon.png Bar icon | Number of active remediation tasks \(RTs\) grouped by state. |
| Remediation Tasks by Remediation Target Status | Bar Image omitted: column-icon.png Bar icon | Number of active RTs grouped by remediation target status. This report excludes deferred vulnerable items. |
| Remediation Task Details | List Image omitted: scorecard-icon.png List icon3 | Remediation task record details in a list. |
| Name | Visual | Description |
|---|---|---|
| Status of Exception and False Positive Requests | Bar |
Bar icon|Number of active requests from you.|
|Expiring Deferred and False Positive Remediation Tasks|Bar
Bar icon|Number of Deferred and False Positive Remediation Tasks \(RTs\), grouped by Until date.|
Vulnerability Approvals dashboard
The Vulnerability Approvals dashboard contains the following reports for exception and false positive approvers.
Starting with version 19.0 of Vulnerability Response, this dashboard is available in the New Experience UI.
Note: If you are on Tokyo, you can view the dashboards in the Next Experience UI but with some functional loss.
| Name | Visual | Description |
|---|---|---|
| Exception and False Positive Requests by Age Pending My Approval | Bar |
Bar icon|Number of approvals pending for you, grouped by created date.|
|My Approval and Rejected Exception and False Positive Requests|Bar
Bar icon|Number of approval requests approved or rejected, grouped by approval state.|
|All Remediation Tasks by Risk Rating Pending Approval|Bar
Bar icon|Number of remediation tasks pending approval, grouped by risk rating.|
|All Pending and False Positive Approval Requests Grouped by Reason|Bar
Bar icon|Number of pending approval requests grouped by reason.|