Entity posture insights and Entity posture matrix

Concepts in entity posture

Entity posture metrics use the following concepts. View entities in these categories and drill down to learn more about each one. For example, you can manage exceptions from this dashboard.

• In-scope: Number of entities that are being measured. For example, the number workstations discovered within the past 15 days.

• Exceptions: Number of entities that are in scope, but for some reason, can never be compliant with the metric. For example, a subset of sales team laptops that are used only for legacy demo systems, that cannot be compliant with the endpoint security metric because they are running an older operating system that is not compatible. Exceptions provide the visibility that ordinarily the entities should be compliant, but there is a specific reason that they cannot be.

• Gaps: Number of entities within the scope that do not fit the defined metric. For example, sales team laptops that are not encrypted.

• Compliant: Number of in-scope entities that meet the defined metric logic and are not exceptions.

• Posture assurance: Percentage of selected metrics that this entity is compliant with. If there are 4 metrics selected for the specific entity and the entity is compliant with 2 of them, but has a gap for the other 2, the posture assurance percentage is 50%.

Posture summary

From the Insights menu, select Posture summary to see the summary of all available metrics.

Select or create a filter at the top of the page to show assets or users that match specific criteria or to select specific metrics.

This provides insights into your overall security posture across all selected metrics with a metric compliance percentage for each. Select an individual metric to drill down to the Posture metric.

Posture metric

From the Insights menu, select Posture metric or from the Posture summary, select a specific metric to drill down into.

Select or create a filter at the top of the page to show assets or users that match specific criteria or to select a different metric.

This view displays the individual metric in more detail, including the gaps, trends, and details.

The gap reasons displays the reasons for the gap defined by the metric logic. Metric logic can have multiple reasons for an asset or user having a gap. For example, an asset might have never been vulnerability scanned, but might also have been previously scanned but not in the past 30 days. This chart displays the count of assets or users with gaps and the reason that they have the gap. Depending on the gap reason, remediation of security control gaps might be different.

The Posture metric trends chart displays metric compliance or gaps over the selected time range. For example, this can be leveraged to view compliance improvement over time or gap reduction over time.

In the details section, select Gaps, Compliance, or Exceptions to see assets or users specific to the selected metric in each of these categories.

Entity posture matrix

The Entity posture matrix page shows entity posture metric information by individual asset or user. This is useful to understand how each asset is performing against the metrics that they are in-scope for and to identify the assets that may have low compliance against several metrics.

Select or create a filter at the top of the page to show assets or users that match specific criteria or metrics.

You can also filter by posture assurance, the overall compliance percentage per row in the matrix based on the selected metrics.

The table in the matrix view details the assets or users along with the selected metrics and indicates if the entity is Compliant, has a Gap or an Exception for each metric. A value of N/A indicates the entity was not in scope for that particular metric.

The Posture assurance column represents overall compliance percentage of selected metrics that this entity is compliant with. For example, if there are 4 metrics selected for the specific entity and the entity is compliant with 2 of them but has a gap for the other 2, then the posture assurance percentage is 50%.

Select a value in a specific metric column to drill down to the Entity posture insights, Posture metric view. Select an asset or user to drill down to Entity analysis for that specific asset or user.