Security Dashboard for security risks on devices
The Security Dashboard enables administrators to view the metrics for security risks on devices and users who are enrolled in the MaaS360® account.
Accessing the Security Dashboard from the IBM MaaS360 Portal
From the IBM® MaaS360 Portal home page, go to Security Management and select . This dashboard is updated once every 24 hours. Any security metrics that occur in the past 24 hours are reflected when the dashboard is updated.
The dashboard displays whole number values. Any decimal values in the dashboard are rounded off to the nearest number and the whole number value is displayed. To view the exact values, hover over the scores. The tooltip displays any decimal numbers that are associated with the metric.
Metrics in the Security Dashboard
| Metric | Description |
|---|---|
| Average risk score | The sum of all user risk scores that is divided by the number of users who have at least
one device.
Example: Consider 5 users with user risk scores such as 105, 35, 90, 75, and 80. Each of these users has at least one device. A total of 10 users are present in the organization with at least one device. The average risk score is the sum of all the user risk scores that is divided by the total number of users with at least one device. The average risk score is 38.5. The dashboard displays the score as 39. Hover over the average risk score value to view the exact score of 38.5 in the tooltip. |
| Risky users | Any user with a nonzero risk score is a risky user. A risk score is associated with each
incident. A user can have more than one incident. Each incident contributes to the total risk score
for the user. Example: Consider a total of 10 users in the organization. Out of the 10 users, 6 users have a risk score and 4 users have a risk score that is zero. The risky users count is 6. |
| Risky devices | Any device with a nonzero risk score is considered a risky device. |
| Risk incidents | An event that meets the condition set in a risk rule is a risk incident. Each risk incident
has a severity and a risk score. The Risky incidents metric on the Security Dashboard are the total
number of risky incidents that contribute to the risk score and includes both active and resolved
incidents. Note: When a risk incident is resolved, the risk score does not drop to zero instantly.
The risk score that is associated with the incident decreases gradually every day until the risk
score reaches zero. The risk incident is still counted in the metrics until the risk score that is
associated with the incident reaches zero.
|
Graph in the Security Dashboard
The graph displays the following data in the Security Dashboard.
- The organization has an average risk score of 105. This average is the sum of all the user risk scores that is divided by the total number of users in the organization who are assigned at least one device.
- The number of users with a nonzero risk score is 1.
- A total of 1 device is present that have a nonzero risk score. The number of users (1) is equal to the number of devices (1) where a user might have one device.
- A total of 3 risk incidents are present in the organization. This count includes both open and resolved risk incidents that are contributing to the user risk scores.
- The average risk score trend displays how the risk score changed in the past 60 days.
- The Risk incidents widget consists of risk incidents and top risk incidents widgets. The Risk incidents widget displays the number of incidents and the user risk scores on each day for past 60 days. The Top risk incidents widget lists the top risk incidents for devices in the organization.
- The Average risk score trend and risk incidents display available risk score and risk incidents statistics in the Security Dashboard.
Security Dashboard reporting widgets
The Security Dashboard provides widgets that report the statistics of average risk scores, risk incidents, and users with risk incident details. The following reporting widgets are available in the Security Dashboard.
- Risk incidents
- Top risk incidents
- Users with risk incidents
- Top risky users
- Average risk score trend
- Security events
- Applcation security