Reporting by ownership group

[mlockett (Mike656)]

I want to group findings by ownership groups.
So the Network team or Application team can view their vulnerabilities to remediate or run a report on their progress. Is this the right approach?

[SCO (scor)]

Take a look at what I wrote here:

Queries for Remediation Projects

This is not a feature of the tool and indeed a gap that we see in larger organizations. On a host level, you can tag assets (e.g. owners). The challenge is that on a vulnerability level, it is not document specifically whether this is infra/db/webstack etc. This mapping needs to be done manually, in line with how your organization internally divides it stack in the teams. This will be different for each organisation. You could use the list of vulnerability categories (https://host:3780/vulnera…

So to reply to your question; yes this is the way to go, but your Network team or Application team will see all vulnerabilities of the host to which the are owner, unless you map vulnerability categories to a stack, but this solution is not scalable.

[mlockett (Mike656)]

Now that I have created a custom tag for every asset in our environment. How can I create a view using my newly created tags?

[SCO (scor)]

You could use the query builder on InsightVM cloud and search for “tags” IN, and then select the proper tag from the dropdown. You can save that search and apply it as a filter to a dashboard.