Business Units

​

Overview

Business Units provide a logical grouping of assets based on organizational structure, product lines, or operational domains.
This allows security and engineering teams to understand who owns what, where risk exists, and how vulnerabilities impact the business. Each business unit aggregates assets, vulnerabilities, and risk signals into a single, actionable view.

---

​

1. Access Business Units

The Business Units page provides a centralized list of all units with key insights:

• Owner responsible for the unit
• Total assets mapped to the unit
• Risk classification (Critical, High, Medium)
• Open vulnerabilities summary
• Last updated timestamp

This helps quickly identify high-risk areas across the organization.

---

​

2. Create a Business Unit

Click Create Business Unit to define a new logical grouping for assets. This is typically used to represent:

• Products (e.g., Payments, Analytics)
• Teams (e.g., Backend, DevOps)
• Business functions (e.g., Customer Systems, Internal Tools)

---

​

3. Enter Business Unit Details

Provide the following details:

• Name – Unique identifier for the unit
• Description – Context about its purpose or scope
• Owner – Responsible individual or team
• Logo URL – Optional visual identifier

This ensures clear accountability and traceability.

---

​

4. Business Unit Overview

The overview dashboard provides:

• Total associated assets
• Open critical vulnerabilities
• Total open vulnerabilities
• Associated vulnerabilities count

This acts as a quick snapshot of the unit’s security posture.

---

​

5. Asset & Vulnerability Insights

Visual insights include:

• Asset trend over time to track growth or changes
• Vulnerability distribution to understand severity spread
• Asset type distribution (IPs, repositories, subdomains, etc.)

This helps identify patterns and potential risk concentration.

---

​

6. Risk Assessment

Each business unit is assigned a risk score based on multiple factors. The system categorizes risk into:

• Low
• Medium
• High
• Critical

This enables prioritization across business units.

---

​

7. Configure Risk Parameters

Risk scoring can be influenced using configurable parameters such as:

• Application exposure (e.g., internet-facing)
• Financial impact
• User/customer scale
• Data sensitivity (confidentiality)
• Integrity and availability requirements
• Transactional importance
• Compliance requirements (e.g., PCI)

Adjusting these ensures risk reflects real business impact.

---

​

8. Associated Assets

This section lists all mapped assets along with:

• Asset type (IP, repository, subdomain, etc.)
• Owner
• Active vulnerabilities

This provides a direct link between assets and business context.

---

​

9. Add / Manage Assets

Click Add Assets to associate new assets with the business unit. This ensures all relevant resources are included in risk evaluation.

---

​

10. Asset Selection

You can:

• Search assets across inventory
• Select multiple assets
• Add or remove associations dynamically

This keeps business units up to date as infrastructure evolves.

---

​

11. Vulnerabilities View

Displays all vulnerabilities associated with the unit. If no vulnerabilities are present, the system clearly indicates a clean security state, helping teams quickly validate risk posture.

---

​

Value

Business Units bridge the gap between technical assets and business impact by:

• Establishing clear ownership
• Enabling risk-based prioritization
• Providing contextual visibility into vulnerabilities
• Supporting compliance and reporting needs

---

​

Next Steps

• Map all critical assets to appropriate business units
• Configure risk parameters based on your organization
• Regularly review high-risk units and take action

---

​

Why This Matters

• Connect asset-level risk to business impact
• Eliminate blind spots across organizational boundaries
• Enable risk-based prioritization per business unit
• Strengthen accountability across teams

---

​

Explore Live Demo