This guide contains the following sections:
- Overview and manager permissions
- Reports: where can I find them?
- MITRE ATT&CK reports
- Crisis Sim reports
- The Immersive Resilience Score
Overview and manager permissions
As a manager on our platform, you'll be able to access reports that arm you with a dynamic picture of platform activity across the whole organization, as well as at a team and individual-level.
| Note: |
You'll only be able to see data and dashboards relating to your permissions on our platform.
As an Organization Manager, you'll have access to data relating to your entire organization.
As a Team Admin, you'll only be able to view reports relating to your team, or individuals within your team.
As a Crisis Sim Manager, you'll be able to view reports related to Crisis Sim exercises, including After Action Reports on specific exercises.
More on roles here: Roles & Permissions explained. |
Reports: where can I find them?
The majority of our reports can be accessed by navigating to Reports in the main navigation menu. Reports will only be visible to you if you have the relevant system role and permissions and will appear next to the Launchpad.
Continuously monitor Immersive Labs platform usage by teams and individuals, including progress on assigned content and collections. You can also access CSV exports of datasets from here.
Understand cyber strengths and weaknesses by business function. You can use this area to explore team capabilities across your organization.
- Cyber capability score
Here you'll get a score which represents your cyber capabilities.
A company’s cyber capability score is made up of two parts, of equal weighting, added together. Each is a score out of 500, giving a total score out of 1000:
MITRE ATT&CK (/500) shows an organization's breadth and depth of coverage (based on access to content). The broader the coverage and the more learners that have completed the content the higher the score.
Threat Intelligence (/500) highlights how quick the organization is at dealing with emerging threats by scoring based on how many days after a new threat lab was released it took the organization to complete.
The Benchmark chart available here compares your organization to all other organizations as well as to other organizations in your industry.
- Data Explorer
The Data Explorer area allows you to configure your own datasets and export these to CSV.
We also have some reports in other areas of the platform:
Select the above hyperlinks or keep reading to find out what they are and how to access these.
MITRE ATT&CK reports
MITRE ATT&CK reports can be accessed through the MITRE ATT&CK area of the main navigation menu.
As an individual learner with no platform management permissions, you'll be able to access your personal mapping against the framework, which will show your personal contribution towards technique coverage.
A Team Admin will be able to see how their team is doing, in terms of skill coverage against the framework. Team data will be available in the 'Organization View'.
An Organization Manager will be able to see how the entire organization's cyber capabilities are mapped against the framework.
These reports allow managers to address skill gaps and reduce cyber risk by visualizing skill coverage.
Find out more about MITRE ATT&CK (including what is the Framework and details on report calculations) by visiting our MITRE ATT&CK guide.
Crisis Sim reports
These are available if you're a customer with a Crisis Sim license and are exercising your teams.
You can find our two Crisis Sim Reports by navigating to 'Exercise' in the main navigation menu, then 'Crisis Sim' .
Search for the specific exercise you wish to view results for in the 'Managed by Me' or 'All Exercises' area: use the search bar and/or filters on the left-hand side to bring up the exercise and then select it.
There will then be up to three reports available to you:
- View Your Results: these will be your own specific results/answers and will be available if you have engaged with the exercise as a participant
- View Results: this outlines all the participants' responses to specific decision points, with the option of a CSV export
- View After Action Report: our After Action Reporting suite will provide you with actionable insights around overall performance, inject and participant breakdowns, as well as recommendations for next steps
If you're an Organization Manager, or a Crisis Sim Manager, you'll also have access to the Crisis Responders tab of the Capability by Area report. This area captures your organization's capabilities based on how your employees have exercised their skills through Crisis Sim. You can find out more by visiting our Capability by Area Report guide.
To find out more detailed information on Crisis Sim Reports (including After Action Reports) visit our Crisis Sim results guide.
The Immersive Resilience Score
The Immersive Resilience Score appears in the main navigation menu, if you are assigned a platform Managerial role (such as Team Admin or Organization Manager).
The Score estimates your organization's cyber workforce resilience across all of our products, helping you to understand:
- Your organization's overall cyber resilience
- Trends and progress
- Comparisons to industry and best-in-class benchmarks
For more information and a breakdown of the Immersive Resilience Score see the Immersive Resilience Score guide.