Skip to content

User Guide

my2ndhead edited this page Jul 19, 2015 · 7 revisions

#Introduction This chapter describes the user interface of Risk Manager. The user interface consists of the risk overview and reporting functionality.

#Risk Overview Posture The risk overview is used to give an overview about risks. Risk Overview Screenshot

##Risk Trends The top part of the risk overview shows risk trends over the selected time range.

E.g. if the time-picker is set to "Last 24 hours", the increase/decrease of the count of risks compared to the previous 24 hours of the selected timerange is displayed.

An arrow shows if the trend is increasing or decreasing.

Risk Objects Top 10

The lower left section shows a table with the current top 10 risk objects with the highest score.

Risk Events Top 10

The lower right section shows a table with the current top 10 risk object by risk event count

Drilldown

By selecting a risk object in the top 10 tables a drilldown to the risk search form search will be executed.

Drilldowns can be used to find information about risk events for a particular risk object.

Reports

Risk Manager contains a set of reports to get an overview about risk events over time and also for investigating risk events.

Risk Analyzer

The risk analyzer dashboard shows risk events on timecharts. The upper timechart shows risk score changes over time for risk objects. The lower timechart shows the number of risk events over time for risk objects. Search filter can be used to filter by risk object type, risk object, alert search and time.

Risk Analyzer Screenshot

Clicking on a timechart series, will drilldown to the risk search form.

Risk Search

The risk search form can be used to investigate on risk events. Risk events can be filtered by risk object type, risk object, alert search and time.

Risk Search Screenshot

The first table shows all risk events found. A click on a row will run an in-page drilldown search and will, if available for this alert, display contributing data.

If data has been encrypted using the SA-hypercrypto add-on, a further drilldown, will reveal the data in unencrypted format, if the user has the necessary permission and passwords for the private key.

For more information about encrypting data and pre-requisites see XYZ and Example Risk Searches.

Data Model

Risk Manager delivers its own datamodel Risk Manager. The data model objects can be directly accessed through the App's Pivot menu, by selection "All Risk Events"

Risk Score Tuner

If for any reason the risk score has to be adjusted, then you can search for a risk_object and manually set a new risk score. This tuning action will be visible in all dashboards.

Risk Score Tuner Screenshot

Clone this wiki locally