The Company Overview Metrics dashboard displays Scoring (Asset Risk, AD, PII, and External Scan), Vulnerability, and Compliance Score data in a tile-style format for the selected company.
On the right side of the dashboard, you will also see the System Events timeline-style feed.
Company Metrics - Table of Contents
Company Metrics - Overview
The Company Metrics view will display the following data:
Asset(s) Risk Score
AD Risk Score
PII Risk Score
External Scan Score
Vulnerabilities by Severity with Risk Score (Critical, High, Medium, and Low)
Compliance Score(s) based on Compliance Type Scans selected in Settings
You can click down to see the underlying data for any of the values listed in the Company Overview.
Company Metrics - Details
Company Overview Details
Risk Scoring
Asset Risk Score = MAX weightage achieved * 100 as a percentage (Asset Type = Discovered)
AD Risk Score =MAX weightage achieved * 100 as a percentage
PII Risk Score = pending details
External Scan Risk Score = MAX weightage achieved * 100 as a percentage (Asset Type = External)
Vulnerabilities
Risk Score = MAX weightage achieved * 100 as a percentage (Asset Type = Discovered)
Critical = Count of Critical vulnerabilities
High = Count of High vulnerabilities
Medium = Count of Medium vulnerabilities
Low = Count of Low vulnerabilities
Compliance Scoring
CIS Score = Non Compliant controls count multiplied by the number of Assets
PCI-DSS Score = Non Compliant controls count multiplied by the number of Assets
HIPAA Score = Non Compliant controls count multiplied by the number of Assets
NIST-500 83 Score = Non Compliant controls count multiplied by the number of Assets
Cyber Essentials Score = Non Compliant controls count multiplied by the number of Assets
Company Metrics - Action Toolbar Overview
The Action toolbar provides a set of actions you can take to change the system's Company settings. This toolbar should be docked on the right and always visible. It includes system-built-in actions.
Tag Rules - Add, Edit, or Delete company-level Tag Rules (auto tags).
Company Settings - Company-level settings for Ports Policy, Deprecation Days, EDR Application, Backup Software, Compliance Scan, LW Agent Scan Interval, Remote Agent Install, Patching Status, Domain Scan, Anti Ransomware, Brute Force, Firewall, and Report Card Exclusion Settings.
Update Company Details - Update company-level details, including Company Name, Description, City, State, Country, and Zip Code.
Application Baseline - Add, Edit, or Delete company-level application baseline rules;
see Global Application Baseline Resultsfor the results.
Search CVE - Use the CVE search across the company.
Alerts - tap here to see the timeline style System Events.
Getting Started - tap to view the Getting Started Info (V4 Getting Started In App Info)
Company Metrics - Action Toolbar Actions
Tag Rules
This is where you manage the auto tags that apply at the company level. Any existing Tag Rules will display in the window and allow you to ‘Edit’ or ‘Delete’ them from the three-dot action menu.
Click on the ‘Add’ button to build a new Tag Rule.
Complete all required fields and tap the Save button; otherwise, click Cancel to back out.
Auto Tags will be displayed on the individual asset details and can be viewed from the Assets table view.
Company Settings
Ports Policy
Specify Insecure, Denied, Excluded, and/or Allowed Ports
Deprecation Days
Set asset and/or Agent deprecation days and your Suppress Vulnerabilities days.
EDR Application
The Global EDR applications contain the list of antivirus applications shown in the security report card for the respective assets. Any application not listed as antivirus under Global EDR applications can be added here. Please run a scan after adding it to reflect the application name in the security report card of the respective asset. To Exclude any application from the Global EDR applications list, please click on the 'X' for the selected application.
Backup Software
Any Backup Software not already listed under Backup Software can be added here. Please run a scan after adding it here to reflect the software name in the security report card for the respective asset.
To Exclude any of the Backup Software from the Global Backup Software list, please click on the 'X' for the selected software.
Compliance Scan
Set the Compliance types to be scanned here. Only the selected options will be activated when running compliance scans. This will reduce the time it takes to complete and the load on the scan agents.
Remote Agent Install
By Enabling Remote Agent Install you can install Lightweight Agents on the Probe Discovered Assets.
Update Company Details
Update any Company details, including the Company Name, Description, and Address information.
Application Baseline
This is where you manage your Application Baseline Rules that apply at the company level. Any existing Application Baseline Rules will display in the window and allow you to ‘Edit’ or ‘Delete’ by selecting the rule using the checkbox and tapping the perspective button.
Tap the ADD button to start a new rule; complete all required fields and tap Save.
Alerts
Tap to view the timeline style, System Events.
Getting Started
Tap to view the Getting Started wizard; see the link below for additional information.
V4 Getting Started In App Info
Need Support?
Contact our support team by sending an email to support@connectsecure.com or by visiting our Partner Portal, where you can create, view, and manage your tickets.
https://cybercns.freshdesk.com/en/support/login
