Remediation Planner

The Remediation Planner page serves as a simulation tool where users can interactively implement and test remediation steps recommended by the system in a virtual environment. Administrators have the opportunity to actively address vulnerabilities by executing remediation actions and then simulating the outcomes to assess their effectiveness.

Upon entering the Remediation Planner, administrators can engage with the virtual environment to apply the recommended remediation steps to resolve vulnerabilities. Once the remediation actions are implemented, administrators can initiate the simulation process to evaluate the impact of the remediation efforts.

During the simulation, the system analyzes the network's security posture before and after the application of the remediation plan. It provides a detailed report comparing critical paths, vulnerabilities, and overall security status before and after the remediation process.

The report generated by the Remediation Planner offers valuable insights into the effectiveness of the remediation plan. It highlights any improvements in the network's security posture following the implementation of remediation actions and provides administrators with a clear understanding of the impact on critical paths and vulnerabilities.

Remediation Planner

  • In the Remediation Planner page, administrators are presented with critical assets, all of which are gradable, with the most critical assets labeled as 1. This prioritization allows administrators to focus their remediation efforts on the most crucial components of the network. Each critical path within the figure is clickable. When addressing vulnerabilities, administrators have the option to apply remediation measures using either batch or custom firewall configurations. This flexibility empowers administrators to choose the most suitable approach based on the nature and severity of the vulnerability, as well as the specific requirements of the network environment.

Remediation Planner Figure

  • When clicking on a critical asset within the Remediation Planner page, administrators are presented with simulation actions that can be taken to address vulnerabilities affecting that asset. These simulation actions typically include two options: patch and block.

  • After applying actions to all assets, clicking "simulate" triggers a message indicating that the AI is processing the changes. This ensures that the system reevaluates the network's security posture based on the updated status

Simulate Action

To view previous remediation planner results, users can follow these steps:

  1. Navigate to Organization Settings: Begin by clicking on the "Organization Settings" option, which will direct users to a new page.

  2. Scroll Down to Recent Simulation Results: Once on the Organization Settings page, users should scroll down until they locate the "Recent Simulation Results" section.

  3. Click on Show: In the "Recent Simulation Results" section, clicking the "Show" button will reveal the results of previous remediation planner simulations.

Organization Settings

When the user clicks on "Show" in the "Recent Simulation Results" section, they are directed to a dedicated page displaying the most recent simulation results. This page provides an overview of the outcomes from recent remediation simulations, allowing users to analyze previous actions and understand the effectiveness of their remediation strategies.

Recent Simulation Results
Remediation Planner Page

When the user clicks "Show" in the "Recent Simulation Results" section, they are directed to a Simulation Report page. This report provides a comparative analysis between the current vulnerability landscape and the projected state after remediation actions suggested by the simulation.

Show Recent Simulation

  • After clicking “Simulate” and completing the analysis of the new data, users can view the resulting report. This allows them to compare the status of their network before and after applying the remediation, providing insights into the effectiveness of the actions taken.

Simulation Results

  • Users can also extract this report as a PDF to be saved on their device, making it easy to refer back to at any time.

Report Extraction

The Storm Conclusion section provides a summary of the effectiveness of the recent simulation and remediation efforts. It provides an overall Improvement Percentage: The main focus here is the 16.67% improvement achieved, which is displayed in green, indicating progress in fortifying the system's security

Storm Conclusion

Last updated