Measure, Share, Compare.

Vulnerability and Patch Initiative Overview communicates the effectiveness of security policies and procedures for patch management, vulnerability scanning, and vulnerability remediation. This scorecard presents performance scores for three control objectives: identification of vulnerabilities on critical assets, compliance of patch procedures with policy, and efficiency of incident response. Scores are based on user-defined goals. Performance scores are trended and displayed as RYG rating visuals.

The Key Performance Indicator Rollup Template communicates the effectiveness of policies and controls for patch management, vulnerability scanning, vulnerability remediation. This scorecard presents performance scores for selected key performance indicators. Scores are based on user-defined goals. Performance scores are trended and displayed as RYG rating visuals.

Hosts Covered By Patch Systems displays trended metrics results for the percentage of hosts covered by a patching system.

Hosts Exempt from Vulnerability Scanning presents trended metrics results for the percentage of hosts exempt from vulnerability scanning.

Hosts Missing Critical Patches presents trended metrics results for the percentage of hosts missing high priority required patches.

Hosts With Severe Vulnerabilities presents trended metrics results for the percentage of hosts with severe vulnerabilities detected.

Host Vulnerability presents the distribution and severity of vulnerabilities detected across hosts. This scorecard displays metrics results identifying the most vulnerable hosts and vulnerability impact.

Mean Age of Open Tickets presents trended metrics results for support ticket aging.

Mean Time to Close a Ticket illustrates the activity time for patch support tickets. This scorecard presents trended metrics results for the mean number of days between support ticket initiation and ticket closure.

Most Common Severe Vulnerabilities lists the ten severe vulnerabilities with the most number of instances detected across all hosts.

Open Tickets by Month Created illustrates seasonal changes and spikes in the patch application process. This scorecard shows support ticket aging grouped by ticket creation month.

Patch Management Coverage - Statistics presents details of host coverage by an automated patch management system. This scorecard displays trended metrics results for patched systems and exemptions.

Percentage of Hosts Scanned presents trended metrics results for percentage of hosts covered by a vulnerability scanning system.

Remediation Activity - Statistics displays details for vulnerability remediation process time and remediation ticket duration. This scorecard presents trended metrics results for average process time, process time within policy, average ticket close time, and ticket close time within policy.

Residual Risk Level - Statistics displays details for unpatched assets and ticket processing. This scorecard presents trended metrics results for assets missing at least one critical patch, open patching tickets, and ticket aging.

Scan Coverage - Statistics illustrates host coverage by an automated vulnerability scanning system. This scorecard displays trended metrics results for hosts covered by vulnerability scanning, hosts exempt from scanning, hosts with severe vulnerabilities, and hosts with no known vulnerabilities.

Top Ten Vulnerable Hosts lists the hosts with the highest vulnerability scores. Vulnerability scores are calculated by weighting the number of identified vulnerabilities by their impact rating.

Vulnerabilities by Type shows the distribution of detected vulnerabilities classified by vulnerability type.