Data visualizations used in the Operational Technology Vulnerability Response (PA) dashboard

  • Release version: Yokohama
  • Updated January 30, 2025
  • 3 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Data Visualizations used in the Operational Technology Vulnerability Response (PA) dashboard

    The Operational Technology (OT) Vulnerability Response (PA) dashboard provides a comprehensive set of data visualizations to help ServiceNow customers monitor, assess, and manage OT vulnerabilities effectively. These visualizations are grouped into three main dashboard tabs—Vulnerable Items, Remediation, and Exception—each designed to give actionable insights into different aspects of OT vulnerability management.

    Show full answer Show less

    Vulnerable Items Tab

    This tab focuses on active OT vulnerabilities and their statuses, providing visual insights including:

    • Total OT Vulnerable Items: Bar chart showing active vulnerabilities by device type.
    • New OT Vulnerable Items: Pie chart depicting newly found vulnerabilities by device type.
    • OT Unassigned Vulnerable Items: Pie chart displaying open vulnerabilities without assigned users, grouped by device type.
    • OT Vulnerable Items by State: Bar chart illustrating vulnerabilities by their current state, helping prioritize those under investigation.
    • OT Vulnerable Items by Risk Rating: Bar chart categorizing active vulnerabilities by risk rating over a selected time frame.
    • OT VIs Met Remediation Target: Single score indicating the percentage of closed vulnerabilities meeting remediation deadlines.
    • OT VI Mean Time to Remediate (MTTR): Single score displaying the 30-day running average of remediation time.
    • OT VI by Age: Bar chart grouping active vulnerabilities by their age in days.
    • OT Closed Vulnerable Items by Remediation Target Status: Bar chart showing closed vulnerabilities categorized by remediation target compliance.
    • OT Critical Vulnerable Items by Assignment Group: Indicator scorecard organizing critical vulnerabilities by responsible groups.
    • OT Overdue Critical Vulnerable Items by Assignment Group: Indicator scorecard highlighting overdue critical vulnerabilities by assignment group.

    Remediation Tab

    This tab provides insight into remediation activities and progress through the following visualizations:

    • OT Remediation Tasks: Single score of active remediation tasks.
    • OT Critical Remediation Tasks Near Due: Single score showing critical remediation tasks approaching their deadlines, excluding deferred tasks.
    • OT Remediation Task by Risk Rating: Bar chart grouping active remediation tasks by risk level.
    • OT Remediation Task by Target Status: Bar chart displaying remediation tasks by their target status, excluding deferred items.
    • OT Remediation Task by State: Bar chart showing remediation tasks based on their current state to track progress.
    • OT Unassigned Remediation Tasks: Single score indicating remediation tasks without assigned users or groups.
    • OT Critical Remediation Task by Assignment Group: Indicator scorecard organizing critical remediation tasks by assignment group.
    • OT Overdue Critical Remediation Task by Assignment Group: Indicator scorecard highlighting overdue critical remediation tasks by group.

    Exception Tab

    This tab focuses on deferred vulnerabilities and exceptions:

    • OT Deferred Vulnerable Items by Reason: Bar chart showing deferred vulnerabilities grouped by deferral reason.
    • OT Exceptions for Critical Vulnerable Items by Assignment Group: Indicator scorecard displaying exceptions related to critical vulnerabilities organized by assignment group.

    Practical Use for ServiceNow Customers

    These visualizations enable ServiceNow customers to:

    • Quickly identify and prioritize OT vulnerabilities by device type, risk, and remediation status.
    • Monitor remediation task progress and deadlines to ensure timely vulnerability resolution.
    • Track assignment and ownership to manage workload and accountability effectively.
    • Understand deferred vulnerabilities and exceptions to address potential risk exposure.

    By leveraging these dashboards, customers can enhance their OT vulnerability response strategy, improve operational security posture, and meet remediation targets efficiently.

    The Operational Technology Vulnerability Response (PA) dashboard uses data visualizations to display your OT vulnerability data.

    The following tables describe the data visualizations shown in the Operational Technology Vulnerability Response (PA) dashboard.
    Table 1. Vulnerable Items tab data visualizations
    Name Type Description
    Total OT Vulnerable Items Bar Bar chart that displays the active (non-closed) OT vulnerable items grouped by device type.
    New OT Vulnerable Items Pie Pie chart that displays the new OT vulnerable items that were found in your system grouped by device type.
    OT Unassigned Vulnerable Items Pie Pie chart that displays the OT vulnerable items grouped by device type that are open and haven't been assigned to a user.
    OT Vulnerable Items by State Bar Bar chart that displays all the vulnerable items by state. You can interpret how many vulnerabilities are being addressed and how many need further investigation. For example, if the Under Investigation category is relatively high, you can prioritize these items by addressing those vulnerable items first.
    OT Vulnerable Items by Risk Rating Bar Number of the active OT vulnerable items that are grouped by the risk rating over the selected time span.
    OT VIs Met Remediation Target Singe score Percentage of the closed OT vulnerable items that have met their remediation target dates in the current and previous quarters.

    Remediation targets are calculated from the Last Opened date plus the number of days since the Last Opened date (measured as 24-hour increments).
    OT VI Mean Time to Remediate (MTTR) Single score Mean time to remediate (close) an OT vulnerable item, displayed as a 30-day running average.
    Note:
    The value for Age Closed is calculated when the data is collected. The value is the difference between the last_opened date and the date and time of the collection job.
    OT VI by age Bar Bar chart that displays the OT active vulnerable items grouped by age (in days).
    OT Closed Vulnerable Items by Remediation Target Status Bar Number of the closed OT vulnerable items that are grouped by the remediation target status over the selected time span.
    Note:
    The value for Age Closed is calculated when the data is collected. The value is the difference between the last_opened date and the date and time of the collection job.
    OT Critical Vulnerable Item by Assignment Group Indicator scorecard Critical VIs organized by assignment group.
    OT Overdue Critical Vulnerable Items by Assignment Group Indicator scorecard Critical VIs that are overdue organized by assignment group.
    Table 2. Remediation tab data visualizations
    Name Type Description
    OT Remediation Tasks Single score Number of the active (non-closed) OT remediation tasks.
    OT Critical Remediation Tasks Near Due Single score

    Number of the active OT remediation tasks that are approaching their remediation target date.

    The remediation target date of an OT remediation task is set to the closest due date that belongs to an active vulnerable item in the group.

    The remediation targets are calculated from the Last Opened date plus the number of days (measured as 24-hour increments).

    This report excludes the deferred OT remediation tasks.
    OT Remediation Task by Risk rating Bar Bar chart that displays the active OT remediation tasks grouped by the risk rating.
    OT Remediation Task by Target Status Bar Bar chart that displays the active OT remediation tasks grouped by the remediation target status.

    This report excludes the deferred OT vulnerable items.
    OT Remediation Task by State Bar Bar chart that displays all the remediation tasks by state. You can interpret the progress of your remediation tasks.
    OT Unassigned Remediation Tasks Single score Number of the active OT remediation tasks without an assignee or assignment group.
    OT Critical Remediation Task by Assignment Group Indicator scorecard Critical remediation tasks organized by assignment group.
    OT Overdue Critical Remediation Task by Assignment Group Indicator scorecard Critical remediation tasks that are overdue organized by assignment group.
    Table 3. Exception tab data visualizations
    Name Type Description
    OT Deferred Vulnerable Items by Reason Bar Number of the deferred OT vulnerable items that are grouped by the deferral reason.
    OT Exceptions for Critical Vulnerable Items by Assignment Group Indicator scorecard Exceptions for critical VIs organized by assignment group.