Understand the ETM Home Experience
The ETM Home page provides an overview of your organization's cybersecurity risk posture. It presents the current overall risk level, changes in risk over time, and the business areas that contribute most significantly to the organization's risk.
What the Home Page Displays
The Home page provides the following information:
| Component | Description |
|---|---|
| TruRisk Score gauge | Displays the organization's overall TruRisk Score (0–1,000) and its severity band. Select the gauge to view the contributing findings, grouped by asset. |
| Contributing Assets | Displays the number of assets that contribute to the TruRisk Score out of the total number of assets in the inventory. |
| Risk Appetite card | Displays the number of business entities whose TruRisk Score is above their configured risk appetite. |
| Asset Exposure card | Displays the number of critical internet-exposed assets, that is, assets with a TruRisk Score of 850–1,000 that are tagged as internet facing. |
| Top Risk Factors card | Displays up to four risk factors, such as CISA KEV and ransomware, that are present in your findings. |
| Score Change indicator | Displays the number of points by which the TruRisk Score has increased or decreased during the selected comparison period. The default period is the last 7 days. |
| Trend chart | Shows how the TruRisk Score has changed over the last 90 days in relation to the company risk appetite. |
| Business Entities chart | Compares the business value, TruRisk Score, and risk appetite of the organization's business entities. |
Read the TruRisk Score
The gauge in the TruRisk Summary panel on the Home page displays the organization-level TruRisk Score. A higher score indicates higher risk and greater urgency for investigation or remediation.
The gauge identifies the severity band associated with the score:
| Band | Score range |
|---|---|
| Low | 0–499 |
| Medium | 500–699 |
| High | 700–849 |
| Critical | 850–1,000 |
Last Calculated
The date and time displayed at the top of the TruRisk Summary panel (in DD MMM YYYY hh:mm format) indicate when the TruRisk Score was last calculated. If the timestamp is older than expected, newly ingested data may not yet be reflected in the score.
Contributing Assets
This value indicates the number of assets contributing to the TruRisk Score relative to the total number of assets in the inventory. For example, 45.5K of 230K Total indicates that 45.5K of the 230K assets in the inventory contribute to the score. An asset contributes when it has at least one open finding (status New, Active, Reopened, or Fail) that is not ignored. Select the contributing count to view the related findings, or select the total count to open the asset inventory.
Score Change
The arrow and point value displayed below the gauge indicate how the TruRisk Score has changed during the selected comparison period. For example, 0 pts Since last 7 Days indicates no change during the previous seven days. Select the Settings icon to compare against the last 15, 30, 60, or 90 days. The Settings icon appears only when more than 7 days of score history is available.
Risk Appetite Card
The Risk Appetite card displays the number of business entities whose TruRisk Score is above their configured risk appetite. For example, 31/65 business entities are above risk appetite indicates that 31 of the 65 business entities have a TruRisk Score above their configured risk appetite. Select the card to open the list of business entities.
A business entity that exceeds its risk appetite represents an area where the calculated risk is above the level the organization has established as acceptable. You set the company risk appetite in Configuration > Company Profile, and the risk appetite of each business entity when you create or edit the entity. See Configure Risk Appetite.
Asset Exposure Card
The Asset Exposure card displays the number of internet-exposed assets with a TruRisk Score in the Critical band (850–1,000). An asset is considered internet exposed when it has the Internet Facing Assets, EASM, or Shodan tag. These assets combine external exposure with high risk and may require priority investigation or remediation. Select the count to view the corresponding assets.
Top Risk Factors Card
The Top Risk Factors card displays up to four of the following risk factors, based on your findings:
- CISA KEV: Vulnerabilities listed in the CISA Known Exploited Vulnerabilities catalog.
- Ransomware: Vulnerabilities associated with ransomware campaigns.
- Threat Actors: Vulnerabilities associated with known threat actors.
- Weaponized Vulns: Vulnerabilities for which working exploit code is available.
- Malware: Vulnerabilities associated with known malware.
- Critical Misconfigurations: Misconfigurations with a Qualys Detection Score (QDS) of 90–100.
If no risk factors are present, the card displays No Risk Found.
Use this card to identify the factors contributing to the organization's risk and determine where further investigation may be required. For example, a high number of CISA KEV vulnerabilities may indicate a need to prioritize patching, while a high ransomware-related count may require patching together with a review of backup and segmentation controls. See Risk Inputs and Threat Intelligence for definitions of the risk inputs.
Read the Trend Chart
The Trend chart shows how the TruRisk Score has changed over time. By default, the chart displays the previous 90 days, with the corresponding start and end dates shown on the horizontal axis.
The dashed horizontal line represents the organization's company risk appetite and displays its configured value. Compare the TruRisk Score with this line to determine whether the calculated risk is within the organization's defined risk appetite:
- Score above the line: The organization's risk is above the defined risk appetite.
- Score below the line: The organization's risk is within the defined risk appetite.
- Flat trend: The organization's overall risk has remained stable during the selected period.
Read the Business Entities Chart
The Business Entities chart shows how risk is distributed across business entities. The chart presents business value and TruRisk Score together using separate axes:
- Left axis: Business value in the selected currency, displayed as bars.
- Right axis: TruRisk Score from 0 to 1,000, displayed as a line.
If your business entities use more than one currency, select the currency to display from the currency list. Entities without a business value are listed under N/A.
The legend identifies the following:
- Business Entity: The business entity and its valuation.
- TruRisk Score: The current risk score of the business entity.
- Risk Appetite: The risk appetite configured for the business entity, displayed as a dashed line.
- Company Risk Appetite: The organization's overall risk appetite, displayed as a horizontal dashed line.
Interpret Risk by Business Entity
For each business entity, compare the TruRisk Score with its configured Risk Appetite:
- Score above risk appetite: The entity is above its configured acceptable risk level and may require attention.
- Score below risk appetite: The entity is within its configured acceptable risk level.
Consider the entity's business value together with its risk score. An entity with both a high TruRisk Score and high business value may require greater attention because a security issue affecting that entity could have a greater business impact.
Use the following options on the Business Entities panel to focus the view:
- Top Risky: Displays up to four entities whose TruRisk Score is above their risk appetite, starting with the highest score.
- Best Performing: Displays up to four entities whose TruRisk Score is below their risk appetite, starting with the lowest score.
- Overall: Displays business entities that have a TruRisk Score, ordered by business value, in the chart that compares business value, TruRisk Score, and risk appetite. This is the default view.
- View All: Opens the complete list of business entities.
- Create Business Entity: Creates a new business entity for inclusion in risk analysis. Requires permission to create business entities.
- Refresh: Available from the menu icon on the panel. Reloads the business entity data.
If a business entity has no risk appetite set, ETM compares its score with a default risk appetite of 400.
Business value must be assigned to business entities for the bars in the chart to display meaningful values. If business value hasn't been assigned, the bars may appear at or near zero. In that case, the chart can primarily be used to compare risk scores. See Business Context.
Agent Sara Patch Tuesday Pop-Up
When your account has Patch Tuesday vulnerabilities, Agent Sara shows a pop-up on the Home page. The pop-up shows how much of your backlog comes from Patch Tuesday vulnerabilities, how much of it you can close with highly reliable patches, and your current mean time to remediate (MTTR).
The percentages include only vulnerabilities that have an available patch or mitigation.
Click Explore with Agent Sara to build a remediation plan for Patch Tuesday with Chat Now. For details, refer to Build a Remediation Plan with Agent Sara Chat Now.