Measure, Share, Compare.

Threat and Virus Management Initiative Overview communicates the effectiveness of security initiatives designed to detect, protect, and defend critical information systems. This scorecard presents performance scores for three control objectives: identification of malicious threats, monitoring and coverage of critical information systems, and effectiveness of incident response activities. Scores are based on user-defined goals. Performance scores are trended and displayed as RYG rating visuals.

The Key Performance Indicator Rollup Template communicates the effectiveness of policies and controls for system monitoring and coverage, incident response, and malicious code handling. This scorecard presents performance scores for selected key performance indicators. Scores are based on user-defined goals. Performance scores are trended and displayed as RYG rating visuals.

Antivirus Coverage displays trended metrics results for the percentage of assets covered by antivirus management.

Signature Version Distribution illustrates the distribution of each known signature across all agents.

Antivirus Signature Age presents trended metrics results for the average age of virus definitions. This scorecard shows minimum, maximum, and mean number of days since the last signature update.

Antivirus Updates displays trended metrics results for the percentage of virus definitions updated according to the user-definable policy.

Auto-Remediated Critical Viruses presents trended metric results for the percentage of critical virus events successfully cleaned by an antivirus system.

Emerging Malware Behavior shows volume and trends for emerging malware categorized by behavior. This scorecard presents trended metrics results for the following malware behavior categories: Adware, Data Destroyer, File Infector, Modifies Data/Setting, Security Bypass, Spyware, and Steal Data.

Emerging Malware Propagation displays volume and trends for emerging malware categorized by propagation method. This scorecard presents trended metrics results for threats propagated by the following methods: File Sharing/Transfer, Email with URL Link, Network File Transfer, ZIP Attachment, Email Attachment, and Web Browsing.

Emerging Malware Trend shows trended metrics results for the total volume of identified malware threats. This scorecard presents the incidence of the following types of malware: File Sharing/Transfer, Email with URL Link, Network File Transfer, ZIP Attachment, Email Attachment, and Web Browsing.

Firewall Coverage illustrates coverage of assets and networks by a firewall. This scorecard displays trended metrics results for assets protected by a firewall, firewall rule changes, and denied traffic.

HIPS Agent Statistics presents the current state of deployed agents of a Host Intrusion Prevention System (HIPS). This scorecard presents trended metrics results compared to three user-defined policies: agents with signature updates within policy, the mean age of signatures, and agent activity within policy.

Intrusion Detection System Updates In Policy presents trended metric results for signatures updated within policy.

Alert Events presents trended metrics results for volume, severity, and distribution of alerts triggered by Network Intrusion Prevention System (NIPS) or Network Intrusion Detection System (NIDS) sensors.

Incident Response Process Time illustrates incident response time. This scorecard presents trended metric results for overall processing time.

TicketsClosedInPolicy illustrates incident response time. This scorecard presents trended metric results compared to user-defined policies for time to remediate incidents.

Manual Virus Remediation Time displays statistics for the number of days required to manually remediate virus events. This scorecard shows current and trended minimum, maximum, and mean values.

Mean Age of IDS Signatures presents trended metric results for mean signature age.

Mean Age of Virus Definitions examines the latency in virus definition updates. It displays statistics on the number of days since last signature update.

Threat Identification identifies potentially compromised hosts. This scorecard presents trended metrics results for alert incidence and severity, and lists hosts with the most alerts detected by host intrusion prevention, Network Intrusion Prevention (NIPS), and/or Network Intrusion Detection Systems (NIDS).

Top Desination IP Addresses identifies frequently targeted hosts. This scorecard presents metric results listing target IP addresses with the highest total alerts generated by host intrusion prevention, network intrusion prevention, and/or network intrusion detection systems.

Top Severe Viruses lists the current ten most prevalent critical viruses in the organization.

Top Target Ports identifies frequently targeted ports. This scorecard presents metric results listing ports with the highest total alerts generated by host intrusion prevention, network intrusion prevention, and/or network intrusion detection systems.

Virus Count by Severity illustrates the distribution of virus events by severity level.

Viruses Blocked presents trended metrics results for the percentage of virus events blocked by an antivirus system.

Virus Event Statistics presents metrics results for volume, severity, and target platform of virus events, and lists the ten most prevalent viruses.

Virus Impact shows the impact of virus events and identifies the hosts most susceptible to virus infection. This scorecard presents trended metrics results for virus impact, lists the ten viruses with the highest impact ratings, and lists the ten hosts with the most virus infections.

Virus Remediation Attempts illustrates the distribution of virus auto-remediation actions. This scorecard shows the total number of virus events cleaned, deleted, and quarantined.

Virus Remediation Status illustrates the effectiveness of automated virus remediation efforts. This scorecard shows the distribution of virus events by auto-remediation status: successful, failed, or unknown.

Volume of Agents presents the current state of deployed agents of a Host Intrusion Prevention System (HIPS). This scorecard presents trended metric results for number of agents deployed