Is there a report of response rates for threats for KPI's

Michael Cipriano

• October 31, 2019 16:24

We are looking to find a report that shows us the time between threat and threat response or closing.  This is a means of addressing KPI's on a security control.  So if it is a High or Critical threat, it is addressed within 2 hours, if it is Medium to Low, it is addressed within 12 hours.  Is there anything like that in Alert Logic?

we can search through each individual incident and look at threat time and close time but that takes too long.

 

thank you

Yes 0 No

• Official comment

  

  Abby Kincer

  • November 04, 2019 15:44

  Michael - 

  There is currently no report that will show you the data as you're describing. The Incident Workflow Explorer report, found in the Alert Logic console at Reports > Threats > Incident Analysis > Incident Workflow Explorer, will show you dates that incidents were closed, but does not include the more granular data you're looking for.

  That said, I am going to move this post into our Feature Request forum and submit a request ticket to the Product team on your behalf. When we have news on this, we'll update you here.

  If you have any further questions, please don't hesitate to ask!
• 

  Abby Kincer

  • November 04, 2019 15:39
  • Edited

  Hi Michael,

  Great question - let me dig into this and see what we've got for you. I'll reply here soon with details.

  Yes 0 No

Please sign in to leave a comment.