View CISO dashboard
This dashboard provides the Chief Information Security Officers (CISOs) with a high-level overview of security incidents and weekly incidents trends on the instance in the form of graphical charts. These charts help you effectively view and analyze how the Security operations center (SOC) performs.
Before you begin
- Role required: sn_si.admin and sn_si.ciso - Edit and view incidents.
- Ensure that you have the Performance Analytics for Security Incident Response app installed.
About this task
Note:
The CISO dashboard and CISO Overview dashboard were two different ones in the classic UI. But, now the capabilities of the two dashboards have been merged under the CISO dashboard.
The CISO dashboard provides key insights about your security incidents on a weekly basis. You can set up indicators and collect data snapshots of the incidents matching the conditions in the indicator properties. The collected data is then visualized using widgets in the dashboard.
You can visualize the weekly trends using the widgets in the CISO dashboard. The data or statistics for the trends of your security incidents are collected from the weekly incidents indicator properties that are defined by
the organization. You can gain key insights by using the following charts:
- Average Time to Identify (Weekly): This chart illustrates the average weekly time taken to identify a security incident.
- Average Time to Contain (Weekly): This chart illustrates the average weekly time taken to contain a security incident.
- Average Time to Eradicate (Weekly): This chart illustrates the average weekly time taken to eradicate a security incident.
- New Security Incidents this Week: This chart illustrates the number of new security incidents this week.
- Security Incidents Closed this Week: This chart illustrates the number of security incidents closed this week.
- New Security Incidents (Running 7 days): This chart illustrates the number of new security incidents which are running for a week.
- Security Incidents Closed (Running 7 days): This chart illustrates the number of new security incidents that are closed but are running for a week.
- New vs Closed incidents (Daily): This chart illustrates the comparison between the daily new security incidents and daily closed security incidents.
- New vs Closed incidents (Weekly): This chart illustrates the comparison between the weekly new security incidents and the weekly closed security incidents.
- Security Incident Closed Codes: This chart illustrates the closed codes of the security incidents.