Andrew Freeborn

As organizations comply with mandatory regulations, a method used for user account management emerges in some form to align permissions with the recommendations in the regulation. User accounts should follow organizational standards, but some accounts may not be in line with expected permission levels or even may be compromised. This dashboard assists analysts with keeping user accounts in line, and validates organizational user standards with Canada’s ITSG-33 guidelines.

Organizations spend a lot of time addressing vulnerabilities and whether or not they should be remediated or mitigated. Analysts may not be aware of what vulnerabilities have the biggest risk to the organization and where to best focus their efforts. This dashboard can assist analysts by providing information on what remediated vulnerabilities can better reduce risk to the organization.

Many organizations do not have adequate incident response plans in place to deal with infected machines and network compromise. This dashboard aligns with Section XI of the ANSSI 40 Essential Measures for a Healthy Network guide: Organise Response in the Event of an Incident. Organizations will be able to use the information presented to understand current weaknesses and how to fix them, detect compromised hosts, and track incident response activity.

As organizations continue to support workforce mobility, failing to monitor and control network connectivity can lead to the compromise of critical systems and sensitive data. This dashboard aligns with Section II of the ANSSI 40 Essential Measures for a Healthy Network: Control the Network. Using this dashboard, an organization will be able to better monitor network connectivity, access control, and connections of mobile and removable devices.