A security analyst dashboard presents operational data for detecting, investigating, and responding to incidents. It is tailored to the security team rather than providing executives with a strategic overview. section 2.2.1
Useful analyst metrics include:
- Real-time alerts, segmented by severity. section 2.2.3
- Common attack vectors and phishing detection rate. section 2.2.3
- Open vulnerabilities by severity and incident response time. section 2.2.3
- Detailed security events, remediation efforts, threat intelligence, and indicators of compromise. section 2.2.1
TechGuard Solutions
After a spike in phishing attacks, the fictional software company tracks alerts, attack vectors, phishing detection, vulnerabilities, and response time to support detection and response. section 2.2.3
Table 2.4 Security analyst dashboard example values
| Metric |
Value |
| High severity alerts |
15 |
| Medium severity alerts |
30 |
| Low severity alerts |
50 |
| Top attack vector (phishing) |
25 incidents |
| Phishing detection rate |
92% |
| Critical vulnerabilities |
10 |
| High vulnerabilities |
25 |
| Medium vulnerabilities |
40 |
| Low vulnerabilities |
70 |
| Average incident response time |
3 hours |
Example values show alert counts by severity, phishing activity and detection, vulnerability counts by severity, and average response time. section 2.2.3
