Sharon Everson

With an effective cybersecurity program, organizations will improve business continuity and confidence when dealing with threats. This dashboard helps Operations teams reduce risk by understanding which systems to patch first. Using Microsoft Rollups this dashboard will highlight vulnerability, configuration and patching details to track patching efforts and show risk reduction. Microsoft Rollups include both security and reliability updates that are packaged together and distributed over Microsoft’s standard update mechanisms, and do not require cumulative patching.

The privileges assigned to users can often be misconfigured and is a common problem for many organizations. NIA requires that organizations have an understanding of the access granted and at what levels. This dashboard assists risk managers in understanding user privileges, group memberships, and related configurations.

The State of Qatar's MOTC developed the NIA policy to help agencies and entities enable a full-fledged Information Security Management System within their agency. This policy includes a series of security domains. This dashboard provides a summary of an agency's compliance status with the NIA v2.0 policy.

Cloud storage such as OneDrive, iCloud and Dropbox are a few of the popular services embraced by companies and users for backups and data storage. As remote storage opportunities expand for data storage, so does the concern for monitoring possible data leakage and the utilization of cloud services. This report presents a series of charts and matrices for system interactions with cloud file storage services detected over the last seven days.

The use of CVSS risk metrics is common and best practice, but it may be difficult to visualize and understand the impact when performing security risk analysis. Temporal metrics change over the lifetime of the vulnerability. The temporal ratio updates as exploits are developed and shared, and as mitigations and fixes are made available. This dashboard is a heat map that displays the vulnerabilities that register if a published exploit is available.