Executive Report

December 4, 2018 8:54:28 PM UTC
by nxadmin

09/01/2018 to 10/02/2018 vs 08/01/2018 to 09/01/2018

01. Environment Overview - Assets from09/01/2018 to 10/01/2018
An overview of the assets in your environment helps you understand the scaleand effectiveness of your security assessment operations. By assessing yourenvironment in real-time, you can understand the known blind spots and see ifthey are growing. The accuracy of your data depends on how often you assessyour environment.

52,704

1.59t

Total Assessed Assets

Risk Score(was 51,504)Assessed Assets vs Risk Over Time101.51% assessed assets growth vs 127.35% risk growth

50b10kRisk Score

20k00MayJunJulAugSepOct

New Assets

Assessment Ratio

New Software

New Services

842

52.50%

185(was 204)(was 51.75%)(was 8)(was 9)

 312.7%

 1.5%

 125.0%

 44.4%

Discovered Assets

Assessment Counts of Assets

90.62% of new assets are not assessed

Assets were assessed an average of 22 times for this period

14325 3814

2 1417956409
52704 Assessed (52.50%)

1481

214047680 Not Assessed (47.50%)

51 100275421111384

12550

Assessment Counts of Assets
Number of Assets

Regularly assessing your environment for vulnerabilities provides an accurate view of your environment's risk. The"Discovered Assets" chart shows the percentage of assets that were evaluated for vulnerabilities in your known environment
within the report period. The “Assessment Counts of Assets” distribution graph shows the number of times individual
groups of assets were counted during the report period, which inﬂuences the accuracy of your security data.

75

Assessed Assets

100bExecutive Report

December 4, 2018 8:54:28 PM UTCby nxadmin

09/01/2018 to 10/02/2018 vs 08/01/2018 to 09/01/2018

02. Environment Overview Vulnerabilities from 09/01/2018 to10/01/2018
The vulnerabilities overview shows the amount of risk introduced during thereporting period in relation to the overall risk of the environment. The constantintroduction of new and large vulnerabilities creates a downstream impact forassessment and remediation teams. New critical or exploitable vulnerabilities
may indicate opportunities to improve deployment templates or processes.

10.48m52.47%

Total Vulnerabilities

Critical Vulnerabilities

Vulnerabilities and Risk Over Time6m4m3m0100b0May

New TargetedJunJulAug

Sep50b0Oct

New Vulnerabilities

New Vulnerabilities

Vulnerabilities

New Risk

116,789762

59.48m(was 15,285)(was 60)(was 7.07m)

 664.1%

 1170.0%

 741.4%

by Criticality

58950 Critical (50.51%)
48083 Severe (41.20%)
9674 Moderate (8.29%)

Vulnerabilities by Criticality
52.47% of your vulnerabilities are critical

Available Exploits

Available Malware
Kits

4,234150(was 4,220)(was 123) 0.3%

 22.0%5498922 Critical Vulnerabilities (52.47%)
4460297 Severe Vulnerabilities (42.56%)521434 Moderate Vulnerabilities (4.98%)

Each report period categorizes vulnerabilities by criticality and exploitability so you can identify risk. Signiﬁcant increases ineither may indicate a need to increase remediation efforts.

Risk Score

8m

Vulnerabilities

Targeted Vulns

100.96% vulnerabilities growth vs 127.35% risk growthExecutive Report

December 4, 2018 8:54:28 PM UTC
by nxadmin

09/01/2018 to 10/02/2018 vs 08/01/2018 to 09/01/2018

03. Environment Overview - Remediationfrom 09/01/2018 to 10/01/2018
The remediation overview examines how effectively your organization reducedrisk during the reporting period. It is important to have a remediation processthat prioritizes exploitable or targeted vulnerabilities, that pose the highest risk.

527.42k

1:4.23Remediated Vulnerabilities

New Risk vs Remediated Risk

32m

72b16m

48b0May

RemediatedVulnerabilities

Remediated Targeted
Vulnerabilities

Remediated Risk

527.42k

2.9k251.5m(was 13.72k)(was 102)(was 7.24m)

 3744.2%

 2742.2%

 3374.2%

JunJulAugSepOct

Remediations byCriticality

236245 Critical (44.79%)
256894 Severe (48.71%)
34285 Moderate (6.50%)

Average Remediation by Criticality

Avg. remediation (days)

1000

Remediated Exploits

Remediated Malware
Kits

500

1222250(was 2)(was 11)

 500.0%

 100.0%7500Previous Period

CriticalSevereCurrent Period

Moderate

Remediation time indicates the effectiveness of your remediation program. Lower average remediation times for criticalvulnerabilities indicates proper prioritization. To lower your risk exposure, remediate vulnerabilities with exploits or malware
kits ﬁrst.

Remediated Risk

Total Risk

Total Risk vs Remediated Risk
96b

Executive Report

December 4, 2018 8:54:28 PM UTC

09/01/2018 to 10/02/2018 vs 08/01/2018 to 09/01/2018

by nxadmin

04. Environment Overview - Program
Improvements from 09/01/2018 to10/01/2018

195New Remediation Projects

Closed Remediation Projects

The Remediation Projects feature in InsightVM helps security teams initiate andtrack the progress of remediation efforts across your organization. Monitoring
the rate at which new remediation projects are opened and closed can provide
insight into the efﬁciency of remediation efforts. Security teams can prioritize
and organize assets by tagging them. Untagged assets run the risk of not being
assessed regularly and managed for security vulnerabilities. InsightVM has
multiple ways of collecting vulnerability data from assets, but the Insight Agent
provides the best visibility into that data. The more assets that are installed withagents, the greater the visibility into security risks.

Tagged Assets

Assets with Agents

43,307

1,380(was 43,009)(was 1,364)

 0.7%

 1.2%

05. Environment Overview - Location

62

12.30%Location Tagsof environment tagged bylocation

Tags from 09/01/2018 to 10/01/2018
Location Tags can be applied to assets in InsightVM to help security teams
identify, prioritize, and segment activities based on overall risk in deﬁned
locations. Use these metrics to track location-based assignments, as well as
monitor assets by their tagged location for new and remediated risk.

Top 5 Locations

6684 Assets 6.66%
5353 Assets 5.33%

New Risk by Location

Remediated Risk by Location

ParisParis4.1m

Paris137.37m

LabLA ofﬁce1.24m

LA ofﬁce

35.03mLab

54.32kBoston23.54k5274 Assets 5.25%

Los Angeles Dat…

4735 Assets 4.72%

Los Angeles Dat…

4724 Assets 4.71%

BostonBoston450Lab780

Los Angeles

230

Los Angeles10

Executive Report

December 4, 2018 8:54:28 PM UTC

09/01/2018 to 10/02/2018 vs 08/01/2018 to 09/01/2018

by nxadmin

06. Environment Overview - Owner Tagsfrom 09/01/2018 to 10/01/2018
Owner Tags can be applied to assets in InsightVM to help security teams identify,prioritize, and segment activities based on the overall risk by deﬁned owners. Usethese metrics to track owner-based assignments, as well as monitor assets by
their tagged owner for new and remediated risk.

Top 5 Owners

New Risk by Owner

4327 Assets 4.31%
3548 Assets 3.53%

DevOpsWeb Team

3509 Assets 3.50%

IT2220 Assets 2.21%

Backend1693 Assets 1.69%

Sam Foo

Owner Tagsof environment tagged byowner

Sam Foo987.23k

Bill987.12k

Boston Ofﬁce274.84k

Boston Ofﬁce

891.85k

Boston Users

240.63k

Boston Users

888.74k

Paris Ofﬁce

1.23k

Sam Foo87.63k10Paris Ofﬁce321

Bill

Criticality Tags can be applied to assets in InsightVM to help security teams
identify, prioritize, and segment activities based on the overall risk by deﬁned
criticalities. Use these metrics to track criticality-based assignments, as well as
monitor assets by their tagged criticality for new and remediated risk.

Top 5 Criticalities

4326 Assets 4.31%

8.31%

Remediated Risk by Owner

07. Environment Overview - Criticality
Tags from 09/01/2018 to 10/01/2018

5353 Assets 5.33%

52New Risk by Criticality

8932.22%

Criticality Tagsof environment tagged bycriticality

Remediated Risk by Criticality

Very Low

High

16.48mHigh

100.95m

Very HighVery Low

123.14k

Very High33.69mVery High2.57k

Very Low

1.25k

Medium

1.21k

Medium890

Low

203846 Assets 3.83%

High3579 Assets 3.57%

Medium3548 Assets 3.53%

Very Low

Low120