Data visualizations used in the Operational Technology Vulnerability Response (PA) dashboard

  • Release version: Washingtondc
  • Updated January 29, 2024
  • 2 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Data Visualizations Used in the Operational Technology Vulnerability Response (PA) Dashboard

    The Operational Technology Vulnerability Response (PA) dashboard provides critical data visualizations to help organizations manage and analyze their operational technology (OT) vulnerabilities effectively. This dashboard displays various metrics to track vulnerable items, remediation tasks, and exceptions, offering insights into the status and progress of vulnerability management efforts.

    Show full answer Show less

    Key Features

    • Vulnerable Items Tab: Displays metrics such as the number of active OT vulnerable items, configuration items associated with these vulnerabilities, and the mean time to remediate.
    • Remediation Tab: Highlights active OT remediation tasks, grouping them by risk rating and target status, enabling better prioritization and resource allocation.
    • Exception Tab: Provides insights into deferred vulnerable items, categorized by the reason for deferral, aiding in risk management and decision-making.

    Key Outcomes

    By utilizing these visualizations, ServiceNow customers can:

    • Quickly assess the status of OT vulnerabilities and remediation efforts.
    • Identify trends and areas needing attention, such as tasks nearing their target dates.
    • Enhance decision-making through detailed insights into risk ratings and task assignments.

    Overall, the dashboard supports proactive vulnerability management, ensuring that organizations can address risks effectively and improve their operational resilience.

    The Operational Technology Vulnerability Response (PA) dashboard uses data visualizations to display your OT vulnerability data.

    The following tables describe the data visualizations shown in the Operational Technology Vulnerability Response (PA) dashboard.
    Table 1. Vulnerable Items tab data visualizations
    Name Type Description
    OT Vulnerable Items (VI) Single score Number of the active (non-closed) OT vulnerable items.
    OT Vulnerable Configuration Items (CI) Single score Number of the configuration items (CIs) that are associated with one or more active OT vulnerable items.
    OT Remediation Tasks Single score Number of the active (non-closed) OT remediation tasks.
    OT VIs Met Remediation Target Singe score Percentage of the closed OT vulnerable items that have met their remediation target dates in the current and previous quarters.

    Remediation targets are calculated from the Last Opened date plus the number of days since the Last Opened date (measured as 24-hour increments).
    OT VI Mean Time to Remediate (MTTR) Single score Mean time to remediate (close) an OT vulnerable item, displayed as a 30-day running average.
    Note:
    The value for Age Closed is calculated when the data is collected. The value is the difference between the last_opened date and the date and time of the collection job.
    OT Critical Remediation Tasks Near Due Single score

    Number of the active OT remediation tasks that are approaching their remediation target date.

    The remediation target date of an OT remediation task is set to the closest due date that belongs to an active vulnerable item in the group.

    The remediation targets are calculated from the Last Opened date plus the number of days (measured as 24-hour increments).

    This report excludes the deferred OT remediation tasks.
    OT VI by age Heat map Number of the OT active vulnerable items that are grouped by age (in days).
    OT Closed Vulnerable Items by Remediation Target Status Bar Number of the closed OT vulnerable items that are grouped by the remediation target status over the selected time span.
    Note:
    The value for Age Closed is calculated when the data is collected. The value is the difference between the last_opened date and the date and time of the collection job.
    OT Vulnerable Items by Risk Rating Bar Number of the active OT vulnerable items that are grouped by the risk rating over the selected time span.
    Table 2. Remediation tab data visualizations
    Name Type Description
    OT Remediation Task by Risk rating & State Heat map Number of active OT remediation tasks that are grouped by the risk rating and state.
    OT Remediation Task by Risk rating & Target Status Heat map Number of the active OT remediation tasks that are grouped by the risk rating and remediation target status.

    This report excludes the deferred OT vulnerable items.
    OT Unassigned Remediation Tasks Single score Number of the active OT remediation tasks without an assignee or assignment group.
    OT Unassigned Vulnerable Items Single score Number of the active OT vulnerable items without an assignee or assignment group.
    Table 3. Exception tab data visualizations
    Name Type Description
    OT Deferred Vulnerable Items by Reason Bar Number of the deferred OT vulnerable items that are grouped by the deferral reason.