Human Managed app hm.works 1.16 released with dashboard on detected vulnerabilities & prioritized mitigation and remediation 

Since its first release on 13 March 2023, the Human Managed web app hm.works has been getting fresh updates regularly to report on intel, decisions, and actions generated from any data source from our customers.

This week, we are excited to announce the release of a dashboard that reports on the detection of vulnerabilities on managed assets (servers and infrastructure components hosted in corporate network / datacentres / cloud, or apps hosted in public app stores).  Read more about our 

vulnerability use case on our newly revamped website

Intelligence, recommended decisions and actions from continuous and integrated vulnerability assessment across your managed assets. 

The vulnerability dashboard answers the top 3 things you need to know about enterprise security:

What critical vulnerabilities exist in my environment? 

What vulnerabilities should I prioritize based on exploitability?

What is the best action to mitigate or remediate the vulnerability?

The challenges of vulnerability management

Vulnerability is a flaw or weakness in a system that can be exploited to compromise IT security. It can be caused by weakness in any IT administration, process, or design function, such as: 

insecure products & app from system and app vendors 

flaws in user administration / system access 

Effective vulnerability management (from discovery to remediation) requires a proactive, integrated approach that enables continuous vulnerability assessments, prioritized response based on business impact, and effective planning & tracking of remediation actions. 

Most organizations recognize the importance of vulnerability management, but struggle to: 

get accurate visibility of their network topology 

get understanding of security & availability implications of all network devices & computer systems (which can easily be >1000s) 

effectively plan network changes & maintain security controls 

contextualize vulnerabilities based on exploitability / exposure / impact

prioritize urgent and critical issues from data overload on a day to day basis 


HM's vulnerability management use case helps you to get to effective decisions and actions quickly, by taking 

 to vulnerability management -- regardless of the source of threat, or the environment in which a vulnerability is located. 

Let's explore each segment of the posture violation dashboard.

 gives you a high level summary of all open vulnerabilities detected in your assets, customizable to key indicators (in this case, detection severity)

 gives you a direction to prioritize to fix vulnerabilities, based on hm.works's analysis.

 gives you the steps to execute the recommended decision

 Helps you to understand your company's current state of vulnerabilities across all managed assets, and take prioritized decisions and actions to improve the posture -- based on data.

Connect data sources such as vulnerability management, endpoint management, and network management to the Human Managed platform to perform contextualized analysis on vulnerability use cases.

 An interactive grid breaks down detected vulnerabilities based on:

 (common vulnerabilities and exposures identifier for publicly known information security vulnerabilities) 

(common vulnerability scoring system for quantifiable and standard measure of severity of vulnerabilities) 

 (quantifiable and standard measure of impact of vulnerabilities) 

(common weakness enumeration for community-developed list of software and hardware weakness types) 

 (e.g. network management platform, cloud security posture management, vulnerability scanner) 

CPE name, CPE version, app engine, app engine version 

 Understand and explore your current state of vulnerabilities in detail, identify blockers, and plan for improvements to achieve desired posture goals.

 Connect data sources such as vulnerability management, endpoint management, and network management to the Human Managed platform to perform contextualized analysis on vulnerability use cases.

And that is hm.works 1.16! We will be releasing more features and updates regularly, so stay tuned.

To get the latest news from Human Managed, follow us on LinkedIn and check out our website and blog. 

Want to discuss how we can help solve your cyber, digital, or risk operations through data?

Please contact us at hello@humanmanaged.com.

Human Managed hm.works 1.16 released with detection and resolution of vulnerabilities in your assets

Human Managed hm.works 1.16 released with continuous vulnerability management

Since its first release on 13 March 2023, the Human Managed web app hm.works has been getting fresh updates every week or two to report on intel generated from any data source from our customers.

Recently, we've had a series of releases on use cases to improve overall cyber posture of an organization: 

v.15 for ISO 27001:2022, SOC 2, NIST And CIS Benchmark compliance 

Today we are excited to release further updates on v1.15 for you to not only consume intel about posture violation and compliance, but to 

 a drill-down page from every cloud config violation, its check, the check's rationale and remediation steps

 allows you to understand the violation's impact across all monitored assets and mitigate prioritized violation issues on the spot 

(cloud resources under AWS accounts, Azure subscriptions, and GCP projects)

 to build, configure, and monitor cloud compliance use cases on the hm.works platform.

Here is the intel to decision to action flow: 

on top of every use case page to inform your next decision and action. 

explore the data grid to decide on your priorities 

 including other assets affected by the same violation and remediation steps to fix it. 

And that is hm.works 1.15.2! We will be releasing more features and updates regularly, so stay tuned.

To get the latest news from Human Managed, follow us on LinkedIn and check out our blog.

Human Managed hm.works 1.15.2 updated with remediation steps to fix CIS policy violations

Human Managed hm.works 1.15.2 updated with remediation for CIS policy violations

Since its first release on 13 March 2023, the Human Managed web app hm.works has been getting 

 to report on intel generated from any data source from our customers.

 with dashboards on cloud compliance to industry standards and frameworks including ISO 27001:2022, SOC 2, NIST And CIS Benchmark.

Today we are excited to release further updates on v1.15, giving you more ways to consume intel on your cloud security posture. 

 current overall scores of your cloud compliance against industry frameworks and standards such as SOC 2 and ISO 27001, as well as numbers of violations against checks. 

 allows you to easily visualize and understand your compliance posture. 

 to build, configure, and monitor cloud compliance use cases on the hm.works platform. 

Click on 'Get the I.De.A' to see the relevant compliance reports, and navigate other compliance frameworks by selecting them from the drop down menu: 

📝Note: Every element on our web app is updated continuously -- as your data changes, the visuals / reports change without requiring any effort from you. 

 current scores of your cloud configurations calculated against CIS benchmarks.   

config posture of your business environments in the cloud business environment, grouped by region.  0% means that the environments are observable, but there is no config detected. 

 config posture of all the resources grouped by cloud account.  

posture of the public cloud infrastructure provider (AWS, Azure, GCP, DigitalOcean)

 allows you to easily visualize and understand your config posture. 

 to build, configure, and monitor cloud posture use cases on the hm.works platform.

And that is hm.works 1.15.1! We will be releasing more features and updates regularly, so stay tuned.

Human Managed hm.works 1.15.1 updated with scorecards for compliance against ISO 27001:2022, SOC 2, NIST, and CIS benchmarks

Human Managed hm.works 1.15.1 updated with scorecards for cloud compliance and configs

Human Managed app hm.works 1.15 released with dashboard on cloud compliance


Since its first release on 13 March 2023, the Human Managed web app hm.works has been getting fresh updates every week to report on intel generated from any data source from our customers.

Our last release was on continuous reports on the detections of violations on public cloud resources (e.g. AWS, Azure, GCP).

This week, we are excited to take cloud security posture use case one step further -- compliance to industry standards and frameworks! 

A collection of charts, recommendations, and data grid that present your org's cloud compliance 

, so that you can mitigate misconfigurations, address your compliance risks in the resources you have deployed in the public cloud, and track your progress.

The cloud posture violation dashboard answers the top 3 things you need to know about the enterprise cloud compliance: 

What important checks have our public cloud resources failed on?

What mitigations should I configure and tune to protect my assets in line with my cyber posture and compliance goals?

Where are the biggest gaps between my preferred posture state and current posture state?

In our v1.15, all of your your cloud controls are checked against global standards and benchmarks: 

(the international gold standard for information security management

(widely recognized and recommended security framework for service providers)

(globally recognized and recommended cybersecurity framework) 

(security config recommendations from global experts)

Before we get those coveted green ticks for you, it's important to clarify some terms in the world of compliance: 

 - conforming to a rule, such as a specification, policy, standard, law or framework (eg. defining and performing all activities required under section A.8.28 Secure Coding of ISO27001)

- set of generally accepted criteria/rules used as a point of reference (eg. ISO 27000)

- a structure that organizes and categorizes the implementation of expected standards (eg. NIST CSF)

 prescriptive recommendations based on industry standards and best practices that can be used for measurement and comparison (eg. perform static application security testing)

criteria used to audit and/or measure the intent, implementation, operations and/or effectiveness (eg. issue tracking software to track weakness)

- a safeguard or countermeasure put in place to protect an asset (eg. secure coding)

📝 Bottom line = we are running continuous 

on your cloud resources and reporting whether each assessment 

Let's explore each segment of the cloud compliance dashboard.

 gives you a high level summary of your compliance state detected in your cloud resources, customizable to key indicators (in this case, pass vs. fail count)

 gives you a direction to prioritize to improve your cloud posture, based on hm.works' analysis.

 Helps you to understand your company's current state of cloud compliance, and take prioritized decisions and actions to improve the compliance -- based on data.

 to build, configure, and monitor violation use cases on the hm.works platform.

 An interactive grid breaks down your organization's cloud compliance based on: 

check severity (critical, high, medium, low)

asset type (app, data, device, network, org, user)

asset variety (e.g. EC2, IAM, CloudTrail, Storage)

control objective (lower attack surface / defense in depth) 

CIS family (identity & access management, networking, monitoring, storage, logging) 

 Understand and explore your current check result against security standards, frameworks, and benchmarks for each control,  identify blockers, and plan for improvements to achieve desired posture goals.

Human Managed hm.works 1.15 released with continuous assessment against security frameworks for cloud

Human Managed hm.works 1.15 released with ISO 27001:2022, SOC 2, NIST and CIS benchmark compliance for cloud

Human Managed app hm.works 1.14 released with dashboard on detected cloud config violations


Since its first release on 13 March 2023, the Human Managed web app hm.works has been getting fresh updates every single week to report on intel generated from any data source from our customers.

 to creating intel on your digital business' assets, postures & behavior, and establishing 🔗

🔗 between them to improve your decisions and actions for many use cases.

This week, we are excited to announce the release of a dashboard that reports on the detections of violations on public cloud resources (e.g. AWS, Azure, GCP).

A collection of charts, recommendations, and data grid that present your org's cloud security posture 

, so that you can mitigate misconfigurations, address your compliance risks in the resources you have deployed in the public cloud, and track your progress. 

The cloud posture violation dashboard answers the top 3 things you need to know about the enterprise cloud security: 

Why you should care about cloud security 

If any of your business apps and data are in the public cloud, you should care about your company's cloud posture.  It's your responsibility to protect your digital assets, whether they're up in the clouds or in your datacentre. 

Major cloud providers have made their respective versions of the responsibility model publicly available (e.g. 

), but AWS simplified this by saying that:

The customer is responsible for security 

 the cloud

The provider is responsible for security 

What this means is that regardless of the service consumed (i.e. either SaaS, PaaS, or Iaas) from the cloud provider, these two facts remain:

(1) the customer is always responsible for its

(2) the cloud provider is responsible for the

So, your digital assets on your public cloud = your responsibility to configure their security controls against your target posture state (taking into account your specific business needs, industry standards, benchmarks). 

gives you a high level summary of all open violations detected in your cloud resources, customizable to key indicators (in this case, check severity) 

gives you a direction to prioritize to improve your cloud posture, based on hm.works's analysis. 

gives you the steps to execute the recommended decision 

 Helps you to understand your company's current state of cloud posture, and take prioritized decisions and actions to improve the posture -- based on data. 

 An interactive grid breaks down your organization's posture violations based on:

asset criticality (critical, high, medium, low)

 Understand and explore your current state of cloud posture and violations in detail, identify blockers, and plan for improvements to achieve desired posture goals.

assets with Critical / High severity posture violation

To quickly see what violations exist per 

And that is hm.works 1.13! We will be releasing more features and updates regularly, so stay tuned.

Human Managed hm.works 1.14 released with cloud config violation detections

Human Managed hm.works 1.14 released with cloud posture violation

Human Managed app hm.works 1.13 released with dashboard on detected network config and rule violations

This week, we are excited to announce the release of a dashboard that reports on the detections of violations on network assets (such as firewalls). 

A collection of reports, charts and data grid that present your org's network posture from use cases such as: 

The posture violation dashboard answers the top 3 things you need to know about your enterprise network posture: 

What important checks and rules have our network devices failed on?

What checks and rules should I configure and tune to protect my assets in line with my cyber posture and compliance goals? 

Where are the biggest gaps between my preferred posture state and current posture state? 

Before we dive in to the details, some key concepts when it comes to network posture: 

read more about our approach to business posture

a standard that sets the parameters for checks and rules

assignment of policies, checks, and rules 

(e.g. a critical firewall's configs of checks and rules may be stricter than a low-criticality firewall's configs, even though they are covered by the same organization network security policy) 

 assessment of whether checks and rules are configured according to desired setting 

state of failed check / rule / configuration 

All these posture states can be monitored as key indicators from your data and adjusted to improve your organizational network posture.

Let's explore each segment of the posture violation dashboard. 

The line chart reports the number of times subscribed  violation use cases have been detected by hm.works platform over time. 

The table lists all subscribed violation use cases, and the posture indicators that trigger the detection for each use case, and the number of times the indicators are detected over a time period. 

📝Note: hm.mworks platform uses automated detections consisting of pre-defined conditions, correlation rules and/or machine learning algorithms to identify suspicious or malicious activities and create Detections that need to be actioned.

Gives you improved visibility of violations across your digital assets, so that you an respond faster to mitigate risk and reduce business impact.

 (e.g. configs from your existing firewall, vulnerability & threat management tools) 

to build, configure, and monitor violation use cases on the hm.works platform.

 A collection of charts with key indicators on network posture violation (e.g. violations on critical firewalls, top 10 critical severity violation detections) 

 Gives you an overview of existing posture violations in your environment and directs the next step to react or resolve the issues (deeper investigation, prioritization) 

(e.g. configs from your existing firewall, vulnerability & threat management tools)

 to build, configure, and monitor violation use cases on the hm.works platform.  

An interactive grid breaks down your organization's posture violations based on: 

check severity (critical, high, medium, low) 

asset criticality (critical, high, medium, low) 

violation use case (e.g. firewall config violation, firewall rule violation) 

Understand and explore your current state of network posture and violations in detail, identify blockers, and plan for improvements to achieve desired posture goals.

exploration: by asset criticality & check severity 

Critical assets with High severity posture violation

group by: violation use case > asset type > assessment status > asset criticality > check severity 

group by: assessment status > check severity 

 1.13! We will be releasing more features and updates regularly, so stay tuned.

To get the latest news from Human Managed, 

Human Managed hm.works 1.13 released with firewall config and rule violation detections

Human Managed hm.works 1.13 released with network posture violation

Our very first release hm.works 1.0 was on our 

 (a.k.a. Bottom Line Up Front). This feature tells you the most important things you need to know about 

Today, we are excited to share how our customer (a corporate wellness and professional services company) co-created their own headlines to measure the key performance metrics on their core service (wellness consultation and matching members with professional healthcare counselor) continuously, and using the hm.works web app to consume their personalised business intel. 

hm's customer wanted a continuous feed of key metrics to measure their core service offering and their users' interactions with their service on a single page.

Key performance indicators of their service includes (metrics shown in purple box, trend in green):

newly provisioned account, active users, user demographics and key attributes, etc. 

metrics and trends on service utilization:

 booked consultations, booking frequency, completed consultation, no-show rate, top reason for consultation, etc. 

metrics and trends on service conversion: 

conversion from pre-service assessment to completed consultation, etc. 

Having key service performance metrics on a single page gives them a consistent view of their core business and their users.  

This initial 'launchpad' allows them to quickly identify areas for improvements and opportunities, and also forms the basis of future analysis and use case development 

understand customer's business, their services / products / resources to establish context,

identify key metrics and trends that matter to business performance and strategy to establish output, 

connect sources (e.g. identity and access management solution, form & survey app, booking & scheduling app) to collect, store, process and analyze data to generate 

Here is a screen capture of our ✨designs✨ from workshops with customer, displaying some of the charts, narratives and metrics to present on our app. 

...And this marks the beginning of our journey with the customer to get intel on-demand on their core services. We can't wait to see what comes next, as we analyze their data further and build more use cases to drive better decisions and actions. 

Categories

Recent

Human Managed hm.works 1.16 released with continuous vulnerability management

Human Managed hm.works 1.15.2 updated with remediation for CIS policy violations

Human Managed hm.works 1.15.1 updated with scorecards for cloud compliance and configs

Human Managed hm.works 1.15 released with ISO 27001:2022, SOC 2, NIST and CIS benchmark compliance for cloud

Human Managed hm.works 1.14 released with cloud posture violation

Human Managed hm.works 1.13 released with network posture violation

Case Study: driving service performance with intelligence from data

Human Managed hm.works 1.12.1 updated with geochart

Human Managed hm.works 1.12 released with control status assessment