Skip to main content

Cyware Fusion and Threat Response

Key Metrics

The Key Metrics dashboard provides a comprehensive view of critical metrics and visualizations, including dwell time, mean time to detect and resolve incidents, average cost per analyst, and more. This consolidated view enables decision-makers to better understand incident trends and improve response planning.

Filters 

You can filter the data in Key Metrics using the following metrics:

  • Date Range: Select a date range to view incident and action data assigned to you and your user groups. By default, you can view data from the past week.

  • Location: Select locations to filter incident data. For example, the US and India.

  • Business Units: Select the business units to view incident and action data assigned to you and your user groups.

Widgets 

 Overview Widget Section

Widget Name

Description

Average Cost Per Analyst 

View the average cost spent on every analyst for responding to incidents.

Average Cost Per Business Unit 

View the average cost incurred by business units due to incidents.

Average Cost Per Incident  

View the average cost incurred in responding to incidents.

 Average Cost Per Incident Type

View the average cost incurred in responding to incidents, categorized by type.

Information Widget 

Widget Name

Description

Default chart type

Available chart types

Quick Actions 

Dwell Time (Detect)

View total time assets remained affected during the incident.

Area

  • Pie

  • Area

  • Line

  • Radial Pie

  • Column

  • Bubble

  •  Bar

Mean Time to Detect

View the average time taken to detect an incident.

Formula: 

Total time spent detecting incidents / Total number of incidents

Area

  • Pie

  • Area

  • Line

  • Radial Pie

  • Column

  • Bubble

  •  Bar

Mean Time to Resolve

View the average time taken to resolve an incident.

Formula: 

Total time taken to resolve incidents / Total number of incidents

Area

  • Pie

  • Area

  • Line

  • Radial Pie

  • Column

  • Bubble

  •  Bar

Mean Time of Containment

View the average time taken to contain or mitigate an incident.

Formula: 

Total time taken to contain incidents / Total number of incidents

Area

  • Pie

  • Area

  • Line

  • Radial Pie

  • Column

  • Bubble

  •  Bar

Mean Time to Acknowledge (MTTA)

View the average duration between incident creation and user assignment. Only incidents that are manually created are considered to calculate MTTA. 

Note

You can also add this metric as a widget to the custom dashboards.

Formula:

Total time elapsed from incident creation to user assignment / Total number of incidents.

Note

This metric is available in Respond v3.4.7.4 onwards.

Area

  • Area

  • Line

  • Column

Mean Time to Investigate (MTTI)

View the average time taken from user assignment to incident closure. 

The following conditions apply when calculating MTTI:

  • If you pause an incident, the timer keeps running, and this elapsed time is included in the MTTI calculation.

  • If you reopen an incident, the timer resumes from the last user assignment time.

Note

You can also add this metric as a widget to the custom dashboards.

Formula:

Total time elapsed from user assignment to incident closure / Total number of incidents

Note

This metric is available in Respondv3.4.7.4 onwards.

Area

  • Area

  • Line

  • Column

Incident By Motive 

View the number of incidents by motive. For example, view incidents categorized by motives such as data theft, brand impact, business disruption, and more.

Pie

  • Pie

  • Area

  • Line

  • Radial Pie

  • Column

  • Bubble

  •  Bar

Root Cause 

View the number of incidents by root cause. For example, view incidents with causes such as design errors, inadequate testing, and more.

 Bar

  • Pie

  • Area

  • Line

  • Radial Pie

  • Column

  • Bubble

  •  Bar

Kill Chain Phase 

View incidents grouped by their kill chain phase.

Column

  • Pie

  • Area

  • Line

  • Radial Pie

  • Column

  • Bubble

  •  Bar

Source 

View the number of incidents by source.

To filter incidents by head, select Source using the dropdown menu.

Column

  • Pie

  • Area

  • Line

  • Radial Pie

  • Column

  • Bubble

  •  Bar

Type 

View the number of incidents by type. For example, if 10 incidents are assigned to you, you can see how many belong to types like error, hacking, or IP spoofing.

To view incidents by type, select Type using the dropdown.

Column

  • Pie

  • Area

  • Line

  • Radial Pie

  • Column

  • Bubble

  •  Bar

By Date 

View the number of incidents filtered by incident creation date. 

To view incidents by incident creation date, select By Date using the dropdown.

Column 

  • Pie

  • Area

  • Line

  • Radial Pie

  • Column

  • Bubble

  •  Bar

PII 

View the percentage of incidents containing Personal Identifiable Information (PII).

Percentage Pie

  • Percentage Pie

  • Speedometer

Machine Generated 

View the number of machine-generated incidents.

Hover over the graph to see the count of machine-generated incidents with the total incidents.

Percentage Pie

  • Percentage Pie

  • Speedometer

Customer Notification 

View the number of incidents categorized by whether customer notifications are required.

Pie

  • Pie

  • Area

  • Line

  • Radial Pie

  • Column

  • Bubble

  •  Bar

Incident by Severity 

View the number of incidents by severity.

Pie

  • Pie

  • Area

  • Line

  • Radial Pie

  • Column

  • Bubble

  •  Bar

Incident by Phase 

View the number of incidents grouped by incident workflow phase.

Bar

  • Pie

  • Area

  • Line

  • Radial Pie

  • Column

  • Bubble

  •  Bar

Locations Impacted 

View the number of incidents grouped by locations impacted.

Bubble

  • Pie

  • Area

  • Line

  • Radial Pie

  • Column

  • Bubble

  •  Bar

Business Units 

View the number of incidents categorized by business units.

To view the number of incidents by business units, select Business Units using the dropdown.

Bubble

  • Pie

  • Area

  • Line

  • Radial Pie

  • Column

  • Bubble

  •  Bar