About Scorecard Groups

Scorecard groups are the top level of metric organization. Scorecard groups represent security categories that are important to your organization, such as endpoint, user behavior, and email, and are tracked on a daily basis.
Symantec ICA
includes scorecard groups for insider threats, data in motion events, suspicious activity, and so on.
Individual metrics aggregate to a predetermined scorecard group. Scorecard sections are subsets of a higher level scorecard group representing a specific security category. For example, a scorecard group for the category “Endpoints” might have scorecard sections such as “endpoint risk” and “agent health.” The metrics associated with those sections roll up to the Endpoints scorecard group. Additional scorecard groups can be created by the dashboard administrator.

Creating a Scorecard Group

To create a scorecard group, do the following:
  1. In the
    Symantec ICA
    Administration section, select
    Dashboards
    , and then select
    Scorecards
    .
  2. Click
    New Scorecard
    .
  3. Enter the scorecard group information in the following fields:
    Scorecard Fields
    Scorecard Field
    Description
    Short Display Name
    Sets the abbreviated scorecard group name used to associate scorecard sections.
    Long Display Name
    Sets the full name of the scorecard group.
    Description
    Describes the scorecard group.
  4. Click
    Save
    .

Editing a Scorecard Group

To edit a scorecard group, do the following:
  1. In the
    Symantec ICA
    Administration section, select
    Dashboards
    , and then select
    Scorecards
    .
  2. Right-click the scorecard group, and then click
    Edit
    .
  3. Edit the scorecard group information, as needed.
  4. Click
    Save
    .

Deleting a Scorecard Group

To delete a scorecard group, do the following:
Any scorecard sections and scorecards in the scorecard group are also deleted when you delete a scorecard group. Scorecard sections can be moved to other scorecard groups before deleting the group.
  1. In the
    Symantec ICA
    Administration section, select
    Dashboards
    , and then select
    Scorecards
    .
  2. Right-click the scorecard group, and then click
    Delete
    .
  3. Click
    OK
    to confirm the deletion, or click
    Cancel
    to cancel the deletion.

About Scorecard Sections

Scorecards sections are subsections of a top-level scorecard group, and contain one or more individual metrics. All scorecard sections are organized by their parent scorecard group, and display after a user selects a scorecard.

Creating a Scorecard Section

To create a scorecard section, do the following:
  1. In the
    Symantec ICA
    Administration section, select
    Dashboards
    , and then select
    Scorecards
    .
  2. Right-click the scorecard that will have the new scorecard section, and then click
    Add Scorecard Section
    .
  3. Enter the scorecard section information in the following fields:
    Scorecard Section Fields
    Scorecard Section Field
    Description
    Name
    Sets the name of the scorecard section.
    Description
    Describes the scorecard section.
    Is Displayed
    Displays the scorecard section on the Scorecard page.
  4. Click
    Save
    .
  5. Add metrics to the scorecard, as described in About Metrics.

Editing a Scorecard Section

To edit a scorecard section, do the following:
  1. In the
    Symantec ICA
    Administration section, select
    Dashboards
    , and then select
    Scorecards
    .
  2. Expand the scorecard that has the scorecard section.
  3. Right-click the scorecard section, and then click
    Edit
    .
  4. Modify the scorecard section properties, as needed.
  5. Click
    Save
    .

Moving a Scorecard Section to Another Scorecard

To move a scorecard section to another scorecard, do the following:
  1. In the
    Symantec ICA
    Administration section, select
    Dashboards
    , and then select
    Scorecards
    .
  2. Expand the scorecard that has the scorecard section.
  3. Right-click the scorecard section, and then click
    Edit
    .
  4. Select the target scorecard in the Scorecard list.
  5. Click
    Save
    .

Deleting a Scorecard Section

To delete a scorecard section, do the following:
  1. In the
    Symantec ICA
    Administration section, select
    Dashboards
    , and then select
    Scorecards
    .
  2. Expand the scorecard that has the scorecard section.
  3. Right-click the scorecard section, and then click
    Delete
    .
  4. Click
    OK
    to confirm the deletion, or click
    Cancel
    to cancel the deletion.