Top 10 Riskiest Assets

OCTOBER 2022
CYBERSECURITY
 Rapid 7 Vulnerability Report
The Vulnerability Report runs a weekly scan of all ITW assets

Assets are defined physical devices used for business activities;

Computers, Servers, Routers, Firewalls, Switches, etc

Vulnerabilities are weaknesses that leave our assets open to cyber attacks

Each segment has its own vulnerabilities based on its Assets

Why Is this Report Important?
Not addressing these vulnerabilities can leave our Systems/Assets
open for attack

Similar to leaving the front door open

 Previous Prioritization of Riskiest Assets
Prioritized the 10 Riskiest Assets based on number of malware kits found in each segment
Issues with Previous Prioritization
◦ Only vulnerabilities with high numbers of malware kits were
thought of as critical and investigated

◦ Leaving other more critical vulnerabilities unaddressed and not

resolved
New Prioritization of Vulnerabilities
Two kinds of Assets
1. External- Less Control and more Vulnerable- expand more
2. Internal- More Control and less Vulnerable- expand more

Vulnerability Priority
What We Need From Each Segment?
Help Remediating 10 Riskiest Assets

Cyber security will send a monthly report to each segment called the “10
Riskiest Assets”

Each segment must review the report and begin investigating and remediation
of 10 Riskiest Assets
Action Plan/Process
1. Pull Report Monthly (Jacob)
2. Identify 10 Riskiest Assets based on new Vulnerability prioritization (Jacon)
3. Submit 10 Riskiest Asset to each Segment director (Naz & Donna)
4. Ask each segment to investigate/remediate vulnerabilities (Segment IT Director)
5. After 30 days, Run Report to see if vulnerabilities have been remediated, additional follow-up
if needed (Jacob/Naz &Donna)

Need swim lanes, cybersec, segment it direct, mark team

 Remediation Of 10 Riskiest Assets
Generates
Security 10 Riskiest
Operations Assets
Report

Reviews 10 Sends 10
Cyber
Riskiest Riskiest
Security
Assets Assets
Team
Report Report

Identifies Reports
Remediates
Segment IT solutions to Remediation of
10 Riskiest
Directors remediate 10 10 Riskiest
Assets
Riskiest Assets Assets