Add an additional posture metric

You can create a new metric that is not included in the list of predefined metrics.

You have two options for adding a new metric, described in the following sections of this article:

Whichever method you choose, after you add the additional metric, you must edit the metric logic. See Edit an entity posture metric.

Clone an existing metric

Many metrics follow similar logic. You can start with an existing metric, then modify it to suit your needs.

This section describes how to clone the metric. Refer to the next section, Create an additional metric from scratch, for specifics on each field.

You can also add an additional metric by cloning an existing metric from the Actions menu in the metric table and then editing the metric. This can often be quicker than starting from scratch because many metrics follow similar logic.

  1. In Exposure Analytics, select Configure, then Exposure Analytics, then Entity Posture Management.

  2. Locate the metric you want to clone, then select Clone.

  3. Complete the fields as needed for your organization's needs. Refer to the next section, Create an additional metric from scratch, for specifics on each field.

Create an additional metric from scratch

To add an additional metric, complete the following steps:

  1. In Exposure Analytics, select Configure, then Exposure Analytics, then Entity Posture Management.

  2. Select Add metric, then select Add additional metric.

  3. Select the metric type, either Asset or User.

  4. Enter a unique name for the metric.

  5. Enter a short name for the metric. This short name is used on the Entity analysis overview view and in the Entity details modal, available from the Analyst Queue.

  6. Enter a matrix label. This label is used for the table column name on the Entity posture matrix view.

  7. Add text-only descriptions for the metric. These descriptions appear on the Posture metric view.

    1. Enter the Metric description. Provide an overview of the metric. For example: This metric uses asset management data sources to identify discovered network assets that lack centralized inventory records.

    2. Enter the Metric in-scope description. Describe which assets or users the metric evaluates and any scope criteria. For example: Assets discovered on the network within the last 15 days.

    3. Enter the Metric gap description. State the condition that makes an in-scope entity a gap. For exampl: An asset is not in the asset management solution.

    4. Enter the Metric remediation description. Describe how to resolve the gap and verify the fix. For example: Ensure the asset is managed, confirm its ownership, and check that discovery connectors keep the inventory synchronized.

  8. Select Add.