[ Applies to ] StorageGuard 10.1 and later / All supported storage, backup, SAN and cloud systems / Windows and Linux deployments
Most fixes are made by someone who doesn't sign in to StorageGuard: a storage administrator, a backup operator, a vendor. This article covers the ways to get findings in front of them: a link to one finding, assignment to its owner, labels to organize the work, email for a finding with its evidence, exports and reports for a list, and scheduled reports so the right people get the current picture without asking.
In this article
Share a link to a finding
The quickest way to point a colleague at a finding is its URL. Open the finding and copy the address from the browser, or click the copy-link icon in the finding's toolbar, then paste it into an email, a chat message or a ticket. Anyone with a StorageGuard account and a scope that includes the system opens the finding directly, with its live status, evidence and remediation steps.
Tip: Use a link when the recipient has a StorageGuard account and you want them to work in StorageGuard. Use email with an attachment, below, when they don't, or when you need a copy that doesn't change.
Assign a finding to its owner
If your role allows it, you can make another StorageGuard user the owner of a finding. Open the finding, click Assignee in the Attributes pane and select the user. StorageGuard emails them a notification, and the finding appears when they filter the Risks page by their own name. Assigning is the right way to hand off a finding inside the team: the owner is recorded, and the activity log shows who assigned it and when.
Label findings for a team or project
Risk labels are tags you add to findings, for example the owning team, a remediation project or a change ticket. Once labeled, findings are easy to filter and to report on together.
- Open the finding. In the Description section, click + next to the existing labels.
- On the Risk labels tab, add labels from the list or create a new one, or choose labels to remove.
- Click Apply.
System labels, marked with a lock, are added by StorageGuard and name the technology. For the difference between risk labels, check labels and security labels, see Set up custom check fields and labels.
Email a finding
Send one finding, with its description, evidence and remediation steps, to the person who will fix it.
- Go to Baseline Configuration > Risks, right-click the finding and select Send risk by email.
- Enter the recipients, separated by commas, and a subject.
- In Export type, choose PDF or Word for the attached finding.
- Optionally, add a message, then click Send.
The email is recorded in the finding's activity log. StorageGuard needs a mail server configured to send email; an administrator sets this up under Settings > Admin > Email settings.
Export the findings list
To hand a filtered list to someone, or to work on it in a spreadsheet, filter the Risks page the way you want it and use the export icons at the top of the table to save it as Excel, PDF or Word. The export keeps the current filters and grouping.
Run a findings report
Reports add context that the list doesn't: an executive summary, totals, and evidence for every finding. Pick the one that fits the audience:
| Report | Best for | Format |
|---|---|---|
| Risk Summary | Management: an executive summary of the scanned scope, followed by the list of findings. | PDF or Word |
| Findings Summary | A team: the findings that match your search criteria, in detail. | PDF or Word |
| Analysis Summary | Working through results system by system: pass and fail per check, with evidence, for the systems you select. | Excel |
| Baseline Configuration Overview | A snapshot of the overview dashboard for a status meeting. | PDF or Word |
- Go to Reports > Catalog and click the report.
- Set the parameters at the top, such as system types, sites, policies, status and severity, or keep the defaults.
- Click Generate.
- Click the Share icon and choose the file type to download the full report.
Send a report on a schedule
Have StorageGuard email a report, or save it to a folder, on a schedule or after every analysis.
- Go to Reports > Scheduling and click +.
- In Name, select the report and set its parameters.
- In Report output, choose email, or saving to the file system and enter the folder path.
- For email, enter the Recipients, Subject and Body, and select the Report format: PDF, RTF or HTML.
- Choose when it runs: Daily, Weekly or Monthly at a set time, or End of Security Risk Analysis.
- Select Send if empty if the email should go out even when there's nothing to report.
- Click Save.
Scheduled reports can be edited, cloned, disabled and re-enabled, deleted, or executed now from the Scheduling page.
Tip: Schedule a Findings Summary per team, filtered by that team's labels or sites, at End of Security Risk Analysis. Each team then gets only its own findings, as soon as they're current.
[ Next step ]
Vulnerability findings have their own tab and fields. See Prioritize a vulnerability finding. To show auditors that a standard is met, see Check compliance with a standard.
Related articles
- Review and act on a configuration finding
- Run and schedule a risk analysis
- Set up custom check fields and labels
[ Still need help? ]
Our support team can help with reviewing and remediating findings. Submit a request
Comments
0 comments
Please sign in to leave a comment.