Security Posture

The Security Posture view is an executive-level summary of workspace detection coverage. It answers how deep is the detection today, and how far is it from the workspace target? in a form that fits a weekly status review or a CISO update.

The view has two panels: a posture radar comparing actual and target coverage across all MITRE ATT&CK tactics, and a per-tactic progress breakdown.

Posture radar

The radar lets you compare, for each MITRE ATT&CK tactic, the depth of coverage delivered by the workspace Security Assets against the objectives set for the workspace. Each axis is a tactic, and two lines are plotted on top of those axes:

• Actual Posture: depth of coverage per tactic, based on the techniques mapped by the workspace Security Assets.
• Target Posture: depth of coverage you want to reach, based on the techniques marked as to be covered in the workspace.

A wide gap between the two lines on a given axis marks a tactic where the workspace is short of its target.

To define your targets, open the MITRE ATT&CK view and mark the techniques relevant to your environment as to be covered.

Tactic progress

The tactic progress panel lets you see, for each MITRE ATT&CK tactic, how much of the work toward your objectives is already done and how much remains. Each tactic has a horizontal progress bar sized by its total number of techniques, split into three segments:

• Covered (green): techniques already mapped by the workspace Security Assets.
• To be covered (purple): techniques marked as to be covered in the workspace but not yet mapped.
• Not covered (grey): remaining techniques, neither mapped nor targeted.