Blomgren (Community Member) asked a question.

How to make analytics dashboard to show all app policy compliance - specifically including the 3 factors that go into if an app passes its policy (scan score, flaw severity allowed, remediation period)? and which of the 3 are or aren't compliant?

  • Hi EBlomgren598615,

     

    That's a great question! It almost sounds like you're looking for a dashboard to show why applications might not be passing policy (whether it's score, grace period, flaw rules etc). This is something we've heard quite a bit of interest for.

     

    I'd recommend reaching out to your program manager to have them help put something together for you/ Alternatively I put a few tricks on how to get some of what you're looking for below. From Analytics > Explore Your Data, you can review all the data for your applications on pages called explores.

     

    This should show you the applications due date and when it was last scanned/the score it received

    • Under the Scans explore I'd select Application Name, Last Policy Scan Date, Scan Due Date (You can choose from Static, Dynamic or MPT as shown in the screenshot below), and Score from the options in the left hand column to a table.
    • Filter on Current Policy Compliance being "Did Not Pass"

     

     

    This should provide the following and to what severity the application has flaws, and the remediation period to fix them.

    • Under the Findings explore I'd select Application Name, Severity (I used Custom Severity Name), Grace Period Expiration Date (When Flaws must be fixed by) and Count of Findings Impacting Policy
    • Filter on Current Policy Compliance being "Did Not Pass", Finding Status as "Open", Policy Rule as "No" (This mean the flaw is causing the flaw to not pass) and Policy or Sandbox to "Policy"

     

     

    Again, I would recommend reaching out to your Program Manger so they can help you put something like this together but I hope this helps!

    Expand Post
    • Analytics Explore Tiles
    Selected as Best
  • Hi EBlomgren598615,

     

    That's a great question! It almost sounds like you're looking for a dashboard to show why applications might not be passing policy (whether it's score, grace period, flaw rules etc). This is something we've heard quite a bit of interest for.

     

    I'd recommend reaching out to your program manager to have them help put something together for you/ Alternatively I put a few tricks on how to get some of what you're looking for below. From Analytics > Explore Your Data, you can review all the data for your applications on pages called explores.

     

    This should show you the applications due date and when it was last scanned/the score it received

    • Under the Scans explore I'd select Application Name, Last Policy Scan Date, Scan Due Date (You can choose from Static, Dynamic or MPT as shown in the screenshot below), and Score from the options in the left hand column to a table.
    • Filter on Current Policy Compliance being "Did Not Pass"

     

     

    This should provide the following and to what severity the application has flaws, and the remediation period to fix them.

    • Under the Findings explore I'd select Application Name, Severity (I used Custom Severity Name), Grace Period Expiration Date (When Flaws must be fixed by) and Count of Findings Impacting Policy
    • Filter on Current Policy Compliance being "Did Not Pass", Finding Status as "Open", Policy Rule as "No" (This mean the flaw is causing the flaw to not pass) and Policy or Sandbox to "Policy"

     

     

    Again, I would recommend reaching out to your Program Manger so they can help you put something like this together but I hope this helps!

    Expand Post
    • Analytics Explore Tiles
    Selected as Best
  • Blomgren (Community Member)

    Thanks for responding Erica. Yes you summed it up in your first sentence - trying to make a dashboard to show why applications might not be passing policy (whether it's score, grace period or rules). We have been working over the last few months with our PM on this and either we had difficutly conveying what we wanted or else its just not currently possible with what the analytics tool can offer at this time. I took a shot at it on my own and came up with one pretty much the same as you suggested above, but the difficult part is how to compare those values with the requirements set by each app's policy. For example - score - pass or fail? grace period - pass or fail, rules- pass or fail? Good to know at least others have the same interest on this topic. We will continue looking into it.

    Expand Post

Topics (1)

No articles found
Loading

Ask the Community

Get answers, share a use case, discuss your favorite features, or get input from the community.