Data visualizations used in the Operational Technology Vulnerability Response (PA) dashboard

  • Release version: Xanadu
  • Updated January 22, 2025
  • 3 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Data Visualizations used in the Operational Technology Vulnerability Response (PA) dashboard

    The Operational Technology (OT) Vulnerability Response Performance Analytics (PA) dashboard provides a comprehensive set of data visualizations to help ServiceNow customers monitor, assess, and manage OT vulnerabilities and remediation efforts effectively. These visualizations enable clear insight into vulnerability statuses, risk ratings, remediation progress, and exception handling, facilitating prioritization and resource allocation.

    Show full answer Show less

    Vulnerable Items Tab Visualizations

    • Total OT Vulnerable Items: Bar chart showing active (non-closed) vulnerabilities grouped by device type, helping identify which devices have the most vulnerabilities.
    • New OT Vulnerable Items: Pie chart displaying newly found vulnerabilities by device type, allowing tracking of emerging risks.
    • OT Unassigned Vulnerable Items: Pie chart of open vulnerabilities without an assigned user, highlighting items needing ownership.
    • OT Vulnerable Items by State: Bar chart categorizing vulnerabilities by their current state, assisting in prioritizing those under investigation or needing action.
    • OT Vulnerable Items by Risk Rating: Bar chart illustrating active vulnerabilities grouped by risk level over a selected time frame, useful for risk-based prioritization.
    • OT VIs Met Remediation Target: Single score percentage showing how many closed vulnerabilities met remediation deadlines in current and previous quarters, reflecting remediation performance.
    • OT VI Mean Time to Remediate (MTTR): Single score indicating the average time taken to close vulnerabilities as a 30-day running average, measuring remediation efficiency.
    • OT VI by Age: Bar chart grouping active vulnerabilities by their age (in days), highlighting aging issues that may require urgent attention.
    • OT Closed Vulnerable Items by Remediation Target Status: Bar chart showing closed vulnerabilities grouped by whether remediation targets were met, supporting performance evaluation.
    • OT Critical Vulnerable Item by Assignment Group: Indicator scorecard displaying critical vulnerabilities organized by assignment group, enabling workload management.
    • OT Overdue Critical Vulnerable Items by Assignment Group: Indicator scorecard showing overdue critical vulnerabilities by assignment group, helping prioritize urgent tasks.

    Remediation Tab Visualizations

    • OT Remediation Tasks: Single score counting active remediation tasks, giving an overview of current workload.
    • OT Critical Remediation Tasks Near Due: Single score indicating critical remediation tasks approaching their target dates, aiding proactive management.
    • OT Remediation Task by Risk Rating: Bar chart grouping active remediation tasks by risk rating, focusing efforts on higher-risk tasks.
    • OT Remediation Task by Target Status: Bar chart showing remediation tasks by status relative to remediation targets, excluding deferred items, to track progress.
    • OT Remediation Task by State: Bar chart categorizing remediation tasks by workflow state, enabling progress assessment.
    • OT Unassigned Remediation Tasks: Single score reflecting remediation tasks without an assigned owner or group, highlighting gaps in task ownership.
    • OT Critical Remediation Task by Assignment Group: Indicator scorecard organizing critical remediation tasks by assignment group for efficient distribution.
    • OT Overdue Critical Remediation Task by Assignment Group: Indicator scorecard listing overdue critical remediation tasks by assignment group to focus urgent efforts.

    Exception Tab Visualizations

    • OT Deferred Vulnerable Items by Reason: Bar chart displaying deferred vulnerabilities grouped by deferral reasons, aiding understanding of exceptions.
    • OT Exceptions for Critical Vulnerable Items by Assignment Group: Indicator scorecard showing exceptions related to critical vulnerabilities organized by assignment group, supporting exception management.

    Practical Benefits for ServiceNow Customers

    These visualizations empower customers to:

    • Gain detailed visibility into OT vulnerability status and trends by device type and risk.
    • Prioritize remediation efforts based on risk, age, and overdue status.
    • Monitor remediation process efficiency and compliance with target dates.
    • Identify unassigned vulnerabilities and tasks to ensure accountability.
    • Track exceptions and deferrals to maintain comprehensive vulnerability oversight.

    Overall, the dashboard supports proactive vulnerability management in OT environments, helping customers reduce risk exposure and improve operational security posture efficiently.

    The Operational Technology Vulnerability Response (PA) dashboard uses data visualizations to display your OT vulnerability data.

    The following tables describe the data visualizations shown in the Operational Technology Vulnerability Response (PA) dashboard.
    Table 1. Vulnerable Items tab data visualizations
    Name Type Description
    Total OT Vulnerable Items Bar Bar chart that displays the active (non-closed) OT vulnerable items grouped by device type.
    New OT Vulnerable Items Pie Pie chart that displays the new OT vulnerable items that were found in your system grouped by device type.
    OT Unassigned Vulnerable Items Pie Pie chart that displays the OT vulnerable items grouped by device type that are open and haven't been assigned to a user.
    OT Vulnerable Items by State Bar Bar chart that displays all the vulnerable items by state. You can interpret how many vulnerabilities are being addressed and how many need further investigation. For example, if the Under Investigation category is relatively high, you can prioritize these items by addressing those vulnerable items first.
    OT Vulnerable Items by Risk Rating Bar Number of the active OT vulnerable items that are grouped by the risk rating over the selected time span.
    OT VIs Met Remediation Target Singe score Percentage of the closed OT vulnerable items that have met their remediation target dates in the current and previous quarters.

    Remediation targets are calculated from the Last Opened date plus the number of days since the Last Opened date (measured as 24-hour increments).
    OT VI Mean Time to Remediate (MTTR) Single score Mean time to remediate (close) an OT vulnerable item, displayed as a 30-day running average.
    Note:
    The value for Age Closed is calculated when the data is collected. The value is the difference between the last_opened date and the date and time of the collection job.
    OT VI by age Bar Bar chart that displays the OT active vulnerable items grouped by age (in days).
    OT Closed Vulnerable Items by Remediation Target Status Bar Number of the closed OT vulnerable items that are grouped by the remediation target status over the selected time span.
    Note:
    The value for Age Closed is calculated when the data is collected. The value is the difference between the last_opened date and the date and time of the collection job.
    OT Critical Vulnerable Item by Assignment Group Indicator scorecard Critical VIs organized by assignment group.
    OT Overdue Critical Vulnerable Items by Assignment Group Indicator scorecard Critical VIs that are overdue organized by assignment group.
    Table 2. Remediation tab data visualizations
    Name Type Description
    OT Remediation Tasks Single score Number of the active (non-closed) OT remediation tasks.
    OT Critical Remediation Tasks Near Due Single score

    Number of the active OT remediation tasks that are approaching their remediation target date.

    The remediation target date of an OT remediation task is set to the closest due date that belongs to an active vulnerable item in the group.

    The remediation targets are calculated from the Last Opened date plus the number of days (measured as 24-hour increments).

    This report excludes the deferred OT remediation tasks.
    OT Remediation Task by Risk rating Bar Bar chart that displays the active OT remediation tasks grouped by the risk rating.
    OT Remediation Task by Target Status Bar Bar chart that displays the active OT remediation tasks grouped by the remediation target status.

    This report excludes the deferred OT vulnerable items.
    OT Remediation Task by State Bar Bar chart that displays all the remediation tasks by state. You can interpret the progress of your remediation tasks.
    OT Unassigned Remediation Tasks Single score Number of the active OT remediation tasks without an assignee or assignment group.
    OT Critical Remediation Task by Assignment Group Indicator scorecard Critical remediation tasks organized by assignment group.
    OT Overdue Critical Remediation Task by Assignment Group Indicator scorecard Critical remediation tasks that are overdue organized by assignment group.
    Table 3. Exception tab data visualizations
    Name Type Description
    OT Deferred Vulnerable Items by Reason Bar Number of the deferred OT vulnerable items that are grouped by the deferral reason.
    OT Exceptions for Critical Vulnerable Items by Assignment Group Indicator scorecard Exceptions for critical VIs organized by assignment group.