Using the Dashboard to manage risk meters

All existing Risk Meters appear on your Dashboard page, which provides a quick way to assess risk in any area of your organization. The dashboard is role based access control (RBAC) dependent, so only Risk Meters you have access to will display.

There are several ways to quickly organize your dashboard using the out of the box settings.

In the upper right-hand corner, users can quickly:

• search for risk meters
• organize risk meters in alphabetical/reverse alphabetical order
• organize using the score (low to high or high to low)
• select the green, yellow, and red dots to remove risk meters of that score range from view

The following images shows a dashboard that is organized by score (high to low) and only has the red dot selected (it displays as fully colored in). This means the dashboard displays only high risk risk meters (anything above 660 risk meter score).

Teams can also switch between the “Card View” and the “List View” using the view option in the upper right-hand corner. The screenshots above display the traditional “Card View”. The following screenshot shows the List View, along with the Hierarchical Risk Meters (HRM) feature. HRM allows the creation of Parent-Child relationships. To learn more about Hierarchical Risk Meters, refer to the information here.

The risk meter score and color scheme provide an easy way to focus on Asset Groups that pose the highest risk to your organization. Each risk meter is assigned a Risk Score, which comes with a correlating color:

• Green = Risk Meter score between 0-333

• Yellow/Amber = Risk Meter score between 334-666

• Red = Risk Meter score between 667-1000

Using the Dashboard page you can easily see the cached summary details of the number of assets and vulnerabilities for each group. In the Card View, clicking the drop-down arrow and selecting “Show Counts” provides more information related to the risk meter. This information includes:

• Assets - Identifies the number of assets included in the group.

• Vulnerabilities - Identifies the number of vulnerabilities that exist on those assets.

• Fixes - Identifies the number of patches outstanding for the vulnerabilities on the assets contained in the risk meter.

• Top Priority - Identifies the highest priority vulnerabilities which will most improve your security posture if they are addressed.

• Active Net Breaches - Identifies vulnerabilities that are being successfully exploited in the wild currently.

• Easily Exploitable - Identifies vulnerabilities that are included in exploit kits or other public exploit sources.

• Predicted Exploitable - Identifies the number of vulnerabilities that are predicted to become exploitable.

• Malware Exploitable - Identifies the number of vulnerabilities actively exploited with Malware including Trojans, Worms, Ransomware, and more.

• Popular Targets - Identifies the number of vulnerabilities that other Cisco Vulnerability Management clients are seeing in high volume,

• Zero Days - Identifies 0-day vulnerabilities that are recently discovered vulnerabilities (or bugs) that are not yet known to vendors or anti-virus companies, that hackers can exploit.

In Card View, selecting “Show Trendline” displays a graph that shows the risk meter’s risk score progression over the last 90 day period.

Note: If you are using the List View, the “Show Counts” or “Show Trendline” options will not be available without hovering over the row.

"Edit" in the Card View and the blue pencil icon in the List View will take you to a prompt to edit the Risk Meter name and associated permissions.

You can click the risk meter name from the Dashboard to go to the Vulnerability Management Explore page and see live risk meter scores, vulnerability, and fix data. You can click the Reporting button to view a summary of data. You can click the Top Fixes button to navigate to the 10 largest score reductions with 1, 2, or 3 fixes for the particular risk meter selected.