| (ARCHIVE) 60% of critical security vulnerabilities in the DMZ are remediated within 30 days of discovery .ITS-Information Technology |
Analysis | |
Measure Definition & Importance |
A key preventative action against potential compromises of the City's information systems and networks is the application of security updates to computing software and hardware. As weaknesses are discovered, manufacturers issue updates for their systems to be applied by an enterprises's IT support organization. After updates are issued, IT Solutions must test them on City systems to ensure the updates do not impede the use of those systems, and then implement them. The timely application of updates is a critical defense layer against unauthorized access to City data and systems.
This is a new measurement and we are establishing a baseline.
60% of critical security vulnerabilities in the DMZ are remediated within 30 days of discovery . |
Service Areas |
Attachments |
Measure Data | Last Calculated a year ago |
| Period | | Status | Actual | Total # of vulnerabilities | # vulnerabilities remediated within 30 days | Overall Target | High Variance (FY Target) | Low Variance |
|---|---|---|---|---|---|---|---|---|
| Oct-18 |  | On Target | 435.71% | 14.00 | 61.00 | 60.00% | 50.00% | |
| Nov-18 |  | Insufficient Progress | 17.24% | 58.00 | 10.00 | 60.00% | 50.00% | |
| Dec-18 | | On Target | 93.51% | 77.00 | 72.00 | 60.00% | 50.00% | |
| Jan-19 | | On Target | 85.84% | 113.00 | 97.00 | 60.00% | 50.00% | |
| Feb-19 | | Insufficient Progress | 44.35% | 115.00 | 51.00 | 60.00% | 50.00% | |
| Mar-19 | | On Target | 62.34% | 77.00 | 48.00 | 60.00% | 50.00% | |
| Apr-19 | | On Target | 76.79% | 112.00 | 86.00 | 60.00% | 50.00% | |
| May-19 | | Insufficient Progress | 46.33% | 177.00 | 82.00 | 60.00% | 50.00% | |
| Jun-19 | | On Target | 60.75% | 107.00 | 65.00 | 60.00% | 50.00% | |
| Jul-19 | | On Target | 67.20% | 125.00 | 84.00 | 60.00% | 50.00% | |
| Aug-19 | | On Target | 69.57% | 115.00 | 80.00 | 60.00% | 50.00% | |
| Sep-19 |  | Monitoring/No Info | 125.00 | 60.00% | 50.00% | |||
| Oct-19 | | Monitoring/No Info | 60.00% | 50.00% | ||||
| Nov-19 | | Monitoring/No Info | 60.00% | 50.00% | ||||
| Dec-19 | | Monitoring/No Info | 60.00% | 50.00% | ||||
| Jan-20 | | Monitoring/No Info | ||||||
| Feb-20 | | Monitoring/No Info | ||||||
| Mar-20 | | Monitoring/No Info | ||||||
| Apr-20 | | Monitoring/No Info | ||||||
| May-20 | | Monitoring/No Info | ||||||
| Jun-20 | | Monitoring/No Info | ||||||
| Jul-20 | | Monitoring/No Info | ||||||
| Aug-20 | | Monitoring/No Info | ||||||
| Sep-20 | | Monitoring/No Info | ||||||
| Oct-20 | | Monitoring/No Info | ||||||
| Nov-20 | | Monitoring/No Info | ||||||
| Dec-20 | | Monitoring/No Info | ||||||
| Jan-21 | | Monitoring/No Info | ||||||
| Feb-21 | | Monitoring/No Info | ||||||
| Mar-21 | | Monitoring/No Info | ||||||
| Apr-21 | | Monitoring/No Info | ||||||
| May-21 | | Monitoring/No Info | ||||||
| Jun-21 | | Monitoring/No Info | ||||||
| Jul-21 | | Monitoring/No Info | ||||||
| Aug-21 | | Monitoring/No Info | ||||||
| Sep-21 | | Not Defined | ||||||
| Oct-21 | | Not Defined | ||||||
| Nov-21 | | Not Defined | ||||||
| Dec-21 | | Not Defined | ||||||
| Jan-22 | | Not Defined | ||||||
| Feb-22 | | Not Defined | ||||||
| Mar-22 | | Not Defined | ||||||
| Apr-22 | | Not Defined | ||||||
| May-22 | | Not Defined | ||||||
| Jun-22 | | Not Defined | ||||||
| Jul-22 | | Not Defined | ||||||
| Aug-22 | | Not Defined | ||||||
| Sep-22 | | Not Defined |
Data Source Details & Calculation Information |
Scans are performed by the Cybersecurity team on the City's systems monthly to determine the security vulnerabilities that exist on each server in the DMZ. The results of the scans are recorded in spreadsheets and include the age of each outstanding vulnerability. This information is reported monthly.
(# vulnerabilities remediated this month within 60 days of discover / Total # of vulnerabilities reported within previous 60 days)*100
Measure Type |
Target Type |
Measure ID |