--- title: CISO dashboard description: This dashboard reveals the overall security posture of your organization, including security vulnerability and incidents. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/ciso-dashboard.html release: australia product: Security Incident Response classification: security-incident-response topic_type: concept last_updated: "2026-03-12" reading_time_minutes: 4 breadcrumb: [Security Incident Response Platform Analytics Solutions, Security Incident Response setup, Security Incident Response, Enterprise security case management applications, Security Operations] --- # CISO dashboard This dashboard reveals the overall security posture of your organization, including security vulnerability and incidents. \[Omitted image "ciso-dashboard.png"\] Alt text: Partial view of the Security Operations Center tab of the CISO dashboard \[Omitted image "ciso-dashboard-vulnerability.png"\] Alt text: The Vulnerability Profile tab of the CISO dashboard \[Omitted image "ciso-dashboard-sec-controls.png"\] Alt text: The Security Controls Profile tab of the CISO dshboard with compliance metrics \[Omitted image "ciso-dashboard-business-risk.png"\] Alt text: The Business Risk Profile tab showing risks by category ## End users and roles |End user and goal|Required role| |-----------------|-------------| |CISO: Needs clear visibility regarding the current security posture of the overall organization|sn\_si.ciso| ## CISO dashboard indicators The CISO dashboard presents the following key performance indicators: - **SI - Average Time to Identify** A 7-day average of the time in minutes it takes to identify a security incident, calculated daily. - **Average Time to Contain** A 7-day average of the time in minutes it takes to contain a security incident, calculated daily. - **Average Time to Eradicate** A 7-day average of the time in minutes it takes to eradicate a security incident, calculated daily. Both Average Time to Contain and Average Time to Eradicate are based on the indicator SI - Average Duration Time broken down by Security Incident State. - **New Security Incidents This Week** The weekly sum of the score of the daily Number of new security incidents indicator. - **Security Incidents Closed \(weekly\)** The 7-day running sum of the daily Number of closed security incidents indicator. - **New Security Incidents by Priority** Daily breakdown of the Number of new security incidents indicator by Priority. - **New vs Closed Security Incidents \(weekly\) volume** The 7-day running sum time series of the Number of new incidents indicator charted against the 7-day running sum time series of the Number of closed incidents indicator. - **Security Incident Heatmap** A global map showing the number of open security incidents in each country. - **Security Incident Treemap** An interactive treemap where you can select to see: - Security incidents per business service, broken down by business criticality - Security incidents broken down by category or subcategory of incident - Security incidents per assignment group or per assignee - 'Victim stats' of security incident per affected resource or affected user ## Breakdowns The following breakdowns apply to the indicators on the dashboard: - Business criticality - Security Group - Security Incident Age - Security Incident Category - Security Incident Close Code - Security Incident Priority - Security Incident State - SI - Business Service - Vulnerability ## Data visualizations The dashboard includes the following visualizations: |Title|Type|Description| |-----|----|-----------| |Security Incidents Open for More Than 30 Days by Assignment Group and State|Heatmap \[Omitted image "heatmap.png"\] Alt text: Heatmap icon|Displays models with the most vulnerable items.| |Risks by Category|Donut \[Omitted image "donut-icon.png"\] Alt text: Donut icon|Lists the age of reopened vulnerable items.| |Citations by Authority Document|Donut \[Omitted image "donut-icon.png"\] Alt text: Donut icon|Number of active vulnerabilities| |Security Incidents With Assignee That is not Active|Heatmap \[Omitted image "heatmap.png"\] Alt text: Heatmap icon|Displays the number of open vulnerable items associated with vulnerabilities, \(Common Vulnerability Enumeration \(CVE\) records\), from most to least.| |Security Incidents Not Updated for More Than 30 Days by Assignment Group and State|Heatmap \[Omitted image "heatmap.png"\] Alt text: Heatmap icon|Displays publishers with the most vulnerable items.| |Vulnerability Map|Map \[Omitted image "map-icon.png"\] Alt text: Map icon|A world map showing vulnerabilities by location| |Most Vulnerable Models|Donut \[Omitted image "donut-icon.png"\] Alt text: Donut icon|The applications that contain the most vulnerabilities| |Most Vulnerable CIs by Class|Donut \[Omitted image "donut-icon.png"\] Alt text: Donut icon|CIs by server type| |Services with Critically Significant Vulnerabilities|List \[Omitted image "scorecard-icon.png"\] Alt text: List icon3| | |Non-compliant profiles|Bar \[Omitted image "column-icon.png"\] Alt text: Bar icon|Non-compliant controls by profile| |Control Overview|Bar \[Omitted image "column-icon.png"\] Alt text: Bar icon|Number of compliant and non-compliant controls| |Policy Exceptions|List \[Omitted image "scorecard-icon.png"\] Alt text: List icon3|Policy exceptions with priority, owner, and short description| |Risks by Category|Donut \[Omitted image "donut-icon.png"\] Alt text: Donut icon|The number of risks in each category of risk| |Inherent Risk|Bubble \[Omitted image "bubble-icon.png"\] Alt text: Bubble icon|Inherent SLE vs Inherent ARO| |Residual Risk|Bubble \[Omitted image "bubble-icon.png"\] Alt text: Bubble icon|Residual SLE vs Residual ARO| |Moderate, High, and Very High Risks|Scores\[Omitted image "latest-score-icon.png"\] Alt text: Latest score icon|The numbers of moderate, high, and very high risks, respectively| |Risk by Profile|Stacked Bar\[Omitted image "stacked-column-bkdown-icon.png"\] Alt text: Stacked bar icon|Risk count where you can select what to group by and what to stack by| **Parent Topic:**[Security Incident Response Platform Analytics Solutions](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/security-incident-content-pack.md) **Related topics** [Security Incident Management Premium dashboard]() [Security Incident Management dashboard]() [Security Incident Explorer dashboard]() [Security Operations Efficiency dashboard]()