Findings: Issue Tracking

Ingrid

The Issue Tracking page in the Security Posture Management application [ Findings ➔ Issue Tracking] is a configurable dashboard that provides an overview of the current state of your Issue Tracking progress for one of your companies.

The dashboard is bound by the viewed company where all findings in the dashboard belong to the viewed company.

Configurable per company, allowing you to have a different configuration for your My Company and a subsidiary.

Example: Adding multiple versions of the same card with different configuration options can be helpful in highlighting differences, such as having a version of the Asset Risk Matrix excluding GOOD and NEUTRAL finding grades and a version with all finding grades.
Get a quick overview of your progress in resolving findings over time. Summarizes and tracks your findings by Remediation Status, breaking down each status by finding severity or finding grade.
See the number of findings assigned to users. It is broken down by remediation status so you can track work across the team and enhance your ability to prioritize and plan remediation.

Actions

Visible only to users in your own organization. See user permissions.

Assign Users

Assign users to remediate findings.

Instructions: Assign users from the Finding Table. Refer to the following guides:

Assign a User

Assign Users in Bulk

Change Companies

Instructions: Use the context switcher at the top-left of the SPM app to select the company.

Configure Issue Tracking Notifications

Users assigned to remediate a finding are notified via email. To change this setting for yourself, go to User Preferences [ Settings ➔ Account ➔ User Preferences], and then enable the You are newly assigned to findings option.

Edit the Dashboard

Edit the dashboard, the cards to include, and how it’s organized.

Instructions: Select Edit Dashboard at the top-right. See guide.

Highlight a Primary Rating

Highlight a My Company or My Subsidiary as the primary.

Instructions:

Select the Configure Primary Rating option from the Actions dropdown at the top-right.

Select the company.

Select Save Changes.

Notes Sheet

Use the Notes sheet to manage company notes.

Instructions: Select the Add/View Notes option from the Actions dropdown at the top-right.

Create a Note

Enter a summary for the note into the Subject field (up to 250 characters).

Enter your notes into the Note field. Tag a user with the @ character.

Select Save.

Edit an Existing Note

Select Edit Note.

Delete a Note

Select Delete Note.

Search Existing Notes

Use the Search… bar at the top-right of the Notes sheet.

Save the Issue Tracking Dashboard as a Document (.pdf)

Instructions: Select the Export Page PDF option from the Reports section of the Reports and Assessments menu at the top-right.

Save a Card as an Image (.png)

Instructions: Select Save as Image from the Options button at the top-right of a card.

View the Service Providers Sheet

Instructions: Select Actions ➔ Service Providers at the top-right of the Issue Tracking dashboard.

View the Products Sheet

Instructions: Select Actions ➔ Products at the top-right of the Issue Tracking dashboard.

Cards

❖ Included risk vectors: Compromised Systems, Diligence (except Domain Squatting), and File Sharing.

Card		Description	Filters
Asset Risk Matrix		Shows findings in a matrix by Finding Severity and Asset Importance to help prioritize findings.	Remediation Status – Excludes Resolved and Risk Accepted findings by default. Finding Grade – Excludes GOOD and NEUTRAL findings by default.
Findings By Assignee		Summarizes the number of findings assigned to each user, broken down by remediation status. This card is restricted by Access Control Group (ACG); You will only see other users in your ACG.	Resolved Date Range: 7 Days 30 Days 90 Days ❖ Risk Vectors
Finding Lifetime		Shows the anticipated remaining lifetime of findings currently impacting the risk vector grade, helping to visualize when findings will stop impacting the risk vector grade (assuming nothing changes).	❖ Risk Vectors Finding Grade Finding Severity Date Range: 180 Days 365 Days Show Expiring Findings
Forecasting		View how remediation efforts will impact your rating in the future.
Remediation Status		Individual remediation status cards of all findings in a certain remediation status.	Use the powerful configuration options to get the most out of these cards.
	No Status	Summarizes findings with the No Status remediation status, allowing you to see No Status findings by finding severity or finding grade.	❖ Risk Vectors Assigned Users Display By: Finding Grade Finding Severity Hide Bars with Zero Findings
	Open	Summarizes findings with the Open remediation status, allowing you to see Open findings by finding severity or finding grade.	❖ Risk Vectors Assigned Users Display By: Finding Grade Finding Severity Hide Bars with Zero Findings
	Resolved	Summarizes findings with the Resolved remediation status, allowing you to see resolved findings by finding severity or finding grade.	Date Range: 7 Days 30 Days 90 Days ❖ Risk Vectors Assigned Users Display By: Finding Grade Finding Severity Hide Bars with Zero Findings
	Risk Accepted	Summarizes findings with the Risk Accepted remediation status, allowing you to see Risk Accepted findings by finding severity or finding grade.	❖ Risk Vectors Assigned Users Display By: Finding Grade Finding Severity Hide Bars with Zero Findings
	To Do	Summarizes findings with the To Do remediation status, allowing you to see To Do findings by finding severity or finding grades.	❖ Risk Vectors Assigned Users Display By: Finding Grade Finding Severity Hide Bars with Zero Findings
	Work In Progress	Summarizes findings with the Work In Progress remediation status, allowing you to see Work In Progress findings by finding severity or finding grade.	❖ Risk Vectors Assigned Users Display By: Finding Grade Finding Severity Hide Bars with Zero Findings
Remediation Status Summary		Summarizes the number of findings in each remediation status for a full overview.	Date Range: 7 Days 30 Days 90 Days ❖ Risk Vectors Assigned Users
Resolved Findings Over Time		Shows the number of findings with a Resolved status per month, allowing you to see your progress over time.	❖ Risk Vectors Assigned Users Finding Grade Finding Severity Resolved Date Range: 3 Months 6 Months 12 Months

Card Abbreviation Guide

You can also hover over abbreviated card labels in the dashboard card to see the full label.

Remediation Statuses:

WIP = Work In Progress
RA = Risk Accepted

Finding Severities:

Sev = Severe
Mat = Material
Mod = Moderate
Min = Minor

Finding Grades:

G = Good
F = Fair
W = Warn
B = Bad
N = Neutral

March 24, 2026: Security Posture Management rebrand.
February 13, 2025: Actions section.
October 28, 2024: Issue Tracking navigation instructions moved from Dashboards to Findings.
March 21, 2023: Replaced dashboard configuration instructions with resource link.