# CAASM Overview

The CAASM Overview page provides a snapshot of your cyber asset attack surface with assets broken down by:

1. Asset type, total assets and specific asset types
2. Asset classes, e.g., sorted tables for Applications, Operating Systems, Cloud Resources
3. Asset vulnerability level, top 10 assets sorted by severity level
4. Assets with findings displayed by highest severity level for associated finding
5. Integrations that are providing asset insights

# 1. Asset cards

A row of asset cards across the top of the page provides a real-time count of your organization's most common assets discovered by CAASM.

Selecting any of the cards displays the NetSPI Platform Asset Inventory page filtered to provide focus on the selected asset class.

From there you can view Asset details for each individual asset.

# 2. Asset classes

The asset classes field groups display CAASM-discovered assets by Applications, Operating Systems, and Cloud Resources along with the instance count for each.

You can search, sort, and page through the asset tables. Selecting any of the asset classes' table rows displays the CAASM asset table, filtered for your selection. From there you can dive deeper into each asset's details.

# Applications assets

The Applications table's default display is to show the asset with the highest version count first. This alerts you to the number of different versions your organization has of any asset, some of which may be out of date, etc.

Select any row in the Applications table to display the CAASM assets table, filtered to show CAASM-discovered applications.

Selecting any asset row displays its Asset details page.

# Operating system assets

The Operating Systems table's default display is to show the asset with the highest version count first. This alerts you to the number of different versions your organization has of any asset, some of which may be out of date, etc.

Select any row in the Operating Systems table to display the CAASM assets table, filtered to show CAASM-discovered operating systems for your organization.

Selecting any asset row displays its Asset details page.

# Cloud resources assets

The Cloud Resources table's default display is to show the asset with the highest instance count first. This alerts you to the cloud resources with the highest potential vulnerability.

Select any row in the Cloud Resources table to display the CAASM assets table, filtered to show CAASM-discovered cloud resources for your organization.

Selecting any asset row displays its Asset details page.

# 3. Top 10 highest severity assets

The Top 10 Highest Severity Assets table displays the top-10 CAASM-discovered assets that are most vulnerable.

The top 10 asset status is determined by the following vulnerability-level severity statuses in this order:

• Urgent
• Critical
• High
• Medium

The number of findings associated with each asset displays to the far right.

Selecting any asset row in the Top 10 Highest Severity Assets table displays that asset's Asset details page as illustrated below.

If there is more than one asset of the same type, the Asset details page lists (and links to) the other asset(s) on the Related Assets tab.

# 4. Top 10 highest severity findings

The Top 10 Highest Severity Findings table displays the top-10 severe findings associated with your CAASM-discovered assets. The top 10 findings are determined by the following finding severity statuses in this order:

• Urgent
• Critical
• High
• Medium

Selecting any row in the Top 10 Highest Severity Findings table displays the CAASM Findings page filtered to show the top 10 findings.

Selecting any finding row in the CAASM Findings table displays the full details for that finding on its Finding Details page.

# 5. Asset visibility by integration

The Asset Visibility by Integration field group displays a count of all of your integrations, the number of assets discovered by each integration, and their statuses.

Select one of the three integration cards to view details about those integrations:

• Enabled Integrations: Displays the number of integrations that are enabled and ready for use.
• Working Integrations: Displays the number of integrations that are currently working and the last time they sync'd with your integrated application.
• Failed Integrations: Displays the number of integrations that enabled but failed to sync with your integrated application on their most recent sync attempt.

Expand and select any asset row in the Asset Count by Integration Type table above to view it in the CAASM Assets table, as illustrated below.