About Scorecard Groups
Scorecard groups are the top level of metric organization. Scorecard groups represent security categories that are important to your organization, such as endpoint, user behavior, and email, and are tracked on a daily basis.
Symantec ICA
includes scorecard groups for insider threats, data in motion events, suspicious activity, and so on.Individual metrics aggregate to a predetermined scorecard group. Scorecard sections are subsets of a higher level scorecard group representing a specific security category. For example, a scorecard group for the category “Endpoints” might have scorecard sections such as “endpoint risk” and “agent health.” The metrics associated with those sections roll up to the Endpoints scorecard group. Additional scorecard groups can be created by the dashboard administrator.
Creating a Scorecard Group
To create a scorecard group, do the following:
- In theSymantec ICAAdministration section, selectDashboards, and then selectScorecards.
- ClickNew Scorecard.
- Enter the scorecard group information in the following fields:Scorecard FieldsScorecard FieldDescriptionShort Display NameSets the abbreviated scorecard group name used to associate scorecard sections.Long Display NameSets the full name of the scorecard group.DescriptionDescribes the scorecard group.
- ClickSave.
Editing a Scorecard Group
To edit a scorecard group, do the following:
- In theSymantec ICAAdministration section, selectDashboards, and then selectScorecards.
- Right-click the scorecard group, and then clickEdit.
- Edit the scorecard group information, as needed.
- ClickSave.
Deleting a Scorecard Group
To delete a scorecard group, do the following:
Any scorecard sections and scorecards in the scorecard group are also deleted when you delete a scorecard group. Scorecard sections can be moved to other scorecard groups before deleting the group.
- In theSymantec ICAAdministration section, selectDashboards, and then selectScorecards.
- Right-click the scorecard group, and then clickDelete.
- ClickOKto confirm the deletion, or clickCancelto cancel the deletion.
About Scorecard Sections
Scorecards sections are subsections of a top-level scorecard group, and contain one or more individual metrics. All scorecard sections are organized by their parent scorecard group, and display after a user selects a scorecard.
Creating a Scorecard Section
To create a scorecard section, do the following:
- In theSymantec ICAAdministration section, selectDashboards, and then selectScorecards.
- Right-click the scorecard that will have the new scorecard section, and then clickAdd Scorecard Section.
- Enter the scorecard section information in the following fields:Scorecard Section FieldsScorecard Section FieldDescriptionNameSets the name of the scorecard section.DescriptionDescribes the scorecard section.Is DisplayedDisplays the scorecard section on the Scorecard page.
- ClickSave.
- Add metrics to the scorecard, as described in About Metrics.
Editing a Scorecard Section
To edit a scorecard section, do the following:
- In theSymantec ICAAdministration section, selectDashboards, and then selectScorecards.
- Expand the scorecard that has the scorecard section.
- Right-click the scorecard section, and then clickEdit.
- Modify the scorecard section properties, as needed.
- ClickSave.
Moving a Scorecard Section to Another Scorecard
To move a scorecard section to another scorecard, do the following:
- In theSymantec ICAAdministration section, selectDashboards, and then selectScorecards.
- Expand the scorecard that has the scorecard section.
- Right-click the scorecard section, and then clickEdit.
- Select the target scorecard in the Scorecard list.
- ClickSave.
Deleting a Scorecard Section
To delete a scorecard section, do the following:
- In theSymantec ICAAdministration section, selectDashboards, and then selectScorecards.
- Expand the scorecard that has the scorecard section.
- Right-click the scorecard section, and then clickDelete.
- ClickOKto confirm the deletion, or clickCancelto cancel the deletion.