Security Incident Response indicators
Indicators included in the Security Incident Response Platform Analytics Solution, available as an application on the ServiceNow Store.
For more information, see Security Incident Response (com.snc.security_incident.analytics).
| Indicator | Version introduced |
|---|---|
| SI - Incident Moderate Risk | Pre-Kingston |
| % of open security incidents not updated in last 30 days | Pre-Kingston |
| SI - Incident Priority 1 | Pre-Kingston |
| Number of security incidents closed on first assignment | Pre-Kingston |
| Average age open security incidents | Pre-Kingston |
| Number of open security incidents | Pre-Kingston |
| SI - Average Duration Time | Pre-Kingston |
| Summed duration of closed security incident tasks | Pre-Kingston |
| Average close time of security incident tasks | Pre-Kingston |
| SI - Incident Very High Risk | Pre-Kingston |
| Number of closed security incident tasks | Pre-Kingston |
| % of security incidents not resolved | Pre-Kingston |
| SI - Incident All Risk | Pre-Kingston |
| SI - Incident Business Criticality - non-critical | Pre-Kingston |
| Average resolution time of closed security incidents | Pre-Kingston |
| Average close time of security incidents | Pre-Kingston |
| % of open security incidents that have been reassigned | Pre-Kingston |
| Security Incidents - Closed | Pre-Kingston |
| #of open security incidents not updated in the last 5 days | Pre-Kingston |
| Summed re-assignment of open security incidents | Pre-Kingston |
| Average re-assignment of open security incidents | Pre-Kingston |
| % of security incidents closed by mitigating threat | Pre-Kingston |
| SI - Average Time To Identify | Pre-Kingston |
| Summed age of open security incidents | Pre-Kingston |
| SI - Incident Severity 1 | Pre-Kingston |
| % of new security incidents | Pre-Kingston |
| #of open security incidents not updated in the last 30 days | Pre-Kingston |
| % of security incidents closed on first assignment | Pre-Kingston |
| SI - Incident Priority 2 | Pre-Kingston |
| SI - Incident Severity 2 | Pre-Kingston |
| SI - Incident Impact 2 | Pre-Kingston |
| Number of open security incidents reassigned | Pre-Kingston |
| SI - Incident Priority All | Pre-Kingston |
| #of security incidents closed on the same day opened | Pre-Kingston |
| SI - Incident Business Criticality - high | Pre-Kingston |
| SI - Total Incident Count | Pre-Kingston |
| % of security incidents closed on the same day opened | Pre-Kingston |
| SI - Incident Impact All | Pre-Kingston |
| SI - Incident Impact 1 | Pre-Kingston |
| Security incident backlog growth | Pre-Kingston |
| %of new critical security incidents | Pre-Kingston |
| Number of closed security incidents | Pre-Kingston |
| Summed duration of closed security incidents | Pre-Kingston |
| Sum of age of open security incidents | Pre-Kingston |
| Average age of last update of open security incidents | Pre-Kingston |
| %of open security incidents not updated in last 5 days | Pre-Kingston |
| SI - Denial of Service | Pre-Kingston |
| SI - Incident High Risk | Pre-Kingston |
| SI - Incident Severity All | Pre-Kingston |
| Number of new security incidents | Pre-Kingston |
| Summed age of last update of open security incidents | Pre-Kingston |
| SI - Incident Business Criticality – critical | Pre-Kingston |
| Average Time to Identity (Weekly) | Pre-Kingston |
| Average Time to Contain (Weekly) | Pre-Kingston |
| Average Time to Eradicate (Weekly) | Pre-Kingston |
| New Security Incidents This Week | Pre-Kingston |
| Security Incidents Closed This Week | Pre-Kingston |
| Number of Security Incidents by Priority | Pre-Kingston |
| New vs. Closed Security Incidents (Weekly) | Pre-Kingston |
| Security Incident Map | Pre-Kingston |
| Business Services with Security Incidents - Business Impact | Pre-Kingston |