View Risk Across Cloud and On-Prem Environments

If you have both InsightVM and InsightCloudSec, you can benefit from a shared view of risk across on-premises and cloud environments using the Executive Risk View.

Use the Executive Risk View to understand the risk in your cloud and on-premises environments.

What is the Executive Risk View?

The Executive Risk View (ERV) provides security leaders with a unified view of their vulnerability risk across cloud and on-premises (on-prem) environments. By combining data from InsightCloudSec CloudVM and InsightVM, leaders can understand remediation progress and make decisions to drive their security programs.

This dashboard provides the following sections to help you understand the risk data from your environments:

• Key Performance Indicators help you understand your risk posture at a glance by displaying the latest metric, how it has changed over time, and link to details.
• Risk overview tracks vulnerability risk trends across cloud and on-premises environments.
• Remediation progress provides data to evaluate the efficiency and effectiveness of your remediation activities at reducing vulnerability risk.
• Environment trends displays data for changes in your cloud and on-prem environments that impact the vulnerability risk score.
• Accepted risk monitors how much on-prem risk has been accepted through vulnerability exceptions.
• Accountability identifies potential gaps in ownership of assets to drive remediation.

How is risk calculated?

The Executive Risk View uses normalized risk scoring to make it easier to consume and communicate risk to your stakeholders. Normalized risk scoring aggregates the total risk of all vulnerabilities and assets within the scope defined by the filters, taking into account the following vulnerability and asset attributes, and normalizes to a range of 0 to 1000.

Displaying data in Executive Risk View

The Executive Risk View is available from the Insight Platform navigation menu. To display and view data in Executive Risk View, connect InsightCloudSec and InsightVM to the same Insight Platform org and verify that you have assigned the correct access permissions. To get meaningful insight into your environment, you can refine the view using filters.

Connect data

For data to display in Executive Risk View, InsightCloudSec CloudVM and/or InsightVM must be set up and connected to the Insight Platform. Depending on your product setup, the following data displays:

• If InsightCloudSec CloudVM and InsightVM have not been set up, you are prompted to set up the missing data source.
• If one of the products has been set up, the ERV will load with the available data, and you are prompted to set up the missing product.
• When both products have been set up you will have a complete view of vulnerability risk across your cloud and on-prem environments.

Verify permissions

Specific permissions are required for Insight Platform, InsightCloudSec, and InsightVM to view the Executive Risk View. To view Executive Risk View and both cloud and on-prem data, ensure you have the following permissions:

Refining the view

You can refine the data in Executive Risk View by using filters for time range, cloud and/or on-prem data, operating system, vulnerability details, and product-specific data.

Apply filters

To update the Executive Risk View data, click Apply after selecting or removing filter selections. Global filters update the data displayed across all cards in the Executive Risk View. Cloud and on-prem specific filters only update the cloud (InsightCloudSec) or on-prem (InsightVM) data displayed.

Reports

You can create reports from the Executive Risk View, with all filters that are applied on the ERV returned in the report.

Create Report

1. Click Reports > Create Report.
2. Select Executive Risk View as the report template.
3. Provide a name, a description, and select at least one format: PDF and HTML are allowed.
4. Set the date range for the report.
5. You can create a report once, or you can click + Add Schedule to set up a recurring schedule:
   1. Specify a frequency (in days, weeks, or months).
   2. Provide a date range for the report.
   3. Specify the users or email addresses that you want to share the reports with.
   4. Click Add Schedule.
6. Click Create Report.

View Report

Once you have created a report, you can view it in View Reports.

Reports are listed in the order they were generated (most recent first) or you can search for a report by report name or date generated. You can view reports (HTML report format) or download them (PDF format).

Understanding risk

Use the Executive Risk View dashboard cards to help you understand specific information about your cloud and on-premise risk. By understanding the risk across your cloud and on-premise environments, you can take a data-driven approach to decision making, capacity planning, and driving accountability for risk reduction across the business.

Summary KPIs

The Summary KPIs help you understand your risk posture at a glance. You can see the latest metric, how it has changed over time and a link that will take you to the section in the ERV where you will find visualizations providing further details about the data supporting that metric.

Risk Overview

By understanding trends in your risk across cloud and on-prem environments related to the number and severity of vulnerabilities, you can provide meaningful risk data to stakeholders. This data may also help identify potential changes needed to your security program to lower the risk.

Remediation Progress

Remediation progress data helps you evaluate the efficiency and effectiveness of the remediation activities in your security program. Depending on the effectiveness at reducing vulnerability risk, you can adjust processes to reduce the time to remediation.

Environment Trends

Understanding trends in your attack surface coverage related to the number and severity of vulnerabilities enables you to make data-driven decisions for improved cloud and on-prem asset security.

Accepted Risk

For a more secure on-prem environment, understanding how much of your on-prem risk is accepted through vulnerability exceptions. Depending on the impact to your environment, you can determine whether changes are needed to the criteria for vulnerability exceptions. Support for cloud exceptions is planned.

Accountability

By understanding potential gaps in asset ownership, you can determine where to assign owners to drive remediation efforts and create a more secure environment by providing accountability for asset security.