overall score from combining underlying metrics/controls and graded in increments of 10 e.g >=90% = green
44.8%
42.3%
44.4%
45.2%
49.7%
Description:
RSCO-4: Coordination with stakeholders occurs consistent with response plans.
Tags:
NIST CSF 1.1 global
C-730
NIST CSF 1.1 - ID.SC-3
ID.SC-3
89.9%
overall score from combining underlying metrics/controls and graded in increments of 10 e.g >=90% = green
89.2%
89.0%
88.8%
89.0%
88.9%
Description:
IDSC-3: Contracts with suppliers and third-party partners are used to implement appropriate measures designed to meet the objectives of an organization’s cybersecurity program and Cyber Supply Chain Risk Management Plan..
This is a demo metric, used in the demo platform to help illustrate the structure of frameworks -> domains -> controls -> metrics.
Tags:
Metrics Global
C-1073
NIST CSF 1.1 - DE.AE-4
DE.AE-4
90%
overall score from combining underlying metrics/controls and graded in increments of 10 e.g >=90% = green
43.6%
44.4%
45.3%
46.4%
55.2%
Description:
DEAE-4: Impact of events is determined.
Tags:
NIST CSF 1.1 global
C-651
NIST CSF 1.1 - RS.AN-5
RS.AN-5
90%
overall score from combining underlying metrics/controls and graded in increments of 10 e.g >=90% = green
43.6%
44.4%
45.3%
46.4%
55.2%
Description:
RSAN-5: Processes are established to receive, analyze and respond to vulnerabilities disclosed to the organization from internal and external sources (e.g. internal testing, security bulletins, or security researchers).
Tags:
NIST CSF 1.1 global
C-873
NIST CSF 1.1 - DE.CM-2
DE.CM-2
89.9%
overall score from combining underlying metrics/controls and graded in increments of 10 e.g >=90% = green
89.2%
89.0%
88.8%
89.0%
88.9%
Description:
DECM-2: The physical environment is monitored to detect potential cybersecurity events.
Tags:
NIST CSF 1.1 global
C-984
NIST CSF 1.1 - PR.AT-1
PR.AT-1
41.7%
overall score from combining underlying metrics/controls and graded in increments of 10 e.g >=90% = green
25.0%
25.2%
25.2%
39.5%
41.7%
Description:
PRAT-1: All users are informed and trained.
Tags:
NIST CSF 1.1 global
C-742
NIST CSF 1.1 - DE.CM-7
DE.CM-7
100%
overall score from combining underlying metrics/controls and graded in increments of 10 e.g >=90% = green
75.9%
78.2%
78.5%
86.2%
100%
Description:
DECM-7: Monitoring for unauthorized personnel, connections, devices, and software is performed.
Tags:
NIST CSF 1.1 global
G-269
NIST CSF 1.1 - ID.GV
ID.GV
94.3%
overall score from combining underlying metrics/controls and graded in increments of 10 e.g >=90% = green
91.7%
92.1%
92.2%
92.7%
93.3%
Description:
Governance (IDGV): The policies, procedures, and processes to manage and monitor the organization’s regulatory, legal, risk, environmental, and operational requirements are understood and inform the management of cybersecurity risk..
Tags:
NIST CSF 1.1 global
G-229
NIST CSF 1.1 - DE.AE
DE.AE
75.3%
overall score from combining underlying metrics/controls and graded in increments of 10 e.g >=90% = green
60.7%
61.5%
61.9%
64.4%
69.2%
Description:
Anomalies and Events (DEAE): Anomalous activity is detected and the potential impact of events is understood..
Develop and implement appropriate activities to identify the occurrence of a cybersecurity event. The Detect Function enables timely discovery of cybersecurity events. Examples of outcome Categories within this Function include: Anomalies and Events; Security Continuous Monitoring; and Detection Processes.
