View Remediation SLA Data

The SLA section of the Exposure View shows Remediation Service Level Agreement (SLA) data for Lumin Exposure View. SLA represents the acceptable time frame between when a finding is discovered and when it fixed or remediated. Here, you can visualize risks by severity and by compliance with your SLAs to determine how well you are aligning to your organization's policy.

How is my SLA calculated?

Lumin Exposure View calculates your SLA efficiency by comparing the number of active findings inside your SLA versus the number of active findings that are inside AND outside your SLA:

Findings inside / Findings (Inside + Outside)

Lumin Exposure View includes all active findings in SLA calculations, but only includes remediated findings if they were fixed during the remediation timeframe. To determine if a finding is inside or outside of your SLA, compare the following finding properties:

  • All active findings: current-date / first-observed-at

  • Remediated findings: last-fixed-at / first-observed-at

The data in the SLA applies to all exposure cards within the Lumin Exposure View and are only based on vulnerability findings. Findings without a Vulnerability Priority Rating (VPR) do not count towards SLA calculations.

Tip: You can configure your SLA in Lumin Exposure View through the Lumin Exposure View. For more information, see Configure Lumin Exposure View Settings.
Note: Because exposure card scores are globally calculated, role-based access control (RBAC) does not affect card data in the Lumin Exposure View.

To view remediation SLA data:

  1. Access the Exposure Cards library.

    A list of exposure cards appears.

  2. Select the exposure card for which you want to view Remediation SLA data.

    The Lumin Exposure View updates based on your selection.

  3. Scroll down to the Remediation SLA section.

In the Remediation SLA section, you can:

  • Select a timeframe for which you want to view the Remediation SLA data:

    • 1m —View Remediation SLA data for the previous month.

    • 3m —View Remediation SLA data for the previous 3 months.

    • 6m —View Remediation SLA data for the previous 6 months.

    • 1y —View Remediation SLA data for the previous year.

    All data within the Remediation SLA section updates accordingly, including the SLA Efficiency and SLA Breakdown subsections.

  • Select a severity level by which you want to filter Remediation SLA data:

    • Critical Risks — View only risks that have a critical severity.

    • High Risks — View only risks that have a high severity.

    • Medium Risks — View only risks that have a medium severity.

    • Low Risks — View only risks that have a low severity.

    All data within the Remediation SLA section updates accordingly, including the SLA Efficiency and SLA Breakdown subsections.

  • In the SLA Efficiency trend graph, view SLA trend metrics for a specific range of dates.

  • View your SLA Breakdown:

    • Click a risk group type to filter the SLA Breakdown data:

      • All Risks — All risks regardless of remediation status.

      • Remediated Risks — Only remediated risks.

      • Non-remediated Risks — Only non-remediated risks.

    • View a graphical representation of your Risk distribution, which shows the number and percentage of risks that fall Inside SLA and Outside SLA.

    • View a graphical representation of your Risk distribution in days, which shows your risk distribution based on the number of days your risks are inside or outside the SLA.

    • View the number of Total risks.

    • View the number of Avg. remediation days.

      Note: This metric only applies to findings that have been fixed or remediated.

  • Click Show business context to view the category impact and business context tag details:

    • In the Categories section, view the percentage of risks outside of your SLA for each data category in Lumin Exposure View.

    • In the Top Affecting Tags section, view the top tags outside of your SLA, listed in descending order.