Design Pattern · 2026-09-15
What a findings dashboard leaves out
Counting open findings measures the discovery process. It says nothing about detection speed, containment, or recovery, and it falls when scanning stops.
Under the pillar The dangers of security theatre
The pattern
Report findings as an operational queue. On the executive view, show detection time, containment time, demonstrated recovery, the reach of the most privileged identity, and the share of controls checked by machines.
A falling finding count may show a tidier backlog. It does not show a safer company when detection time remains unknown.
Put this to work
What a findings dashboard leaves out application record
Apply What a findings dashboard leaves out to a real piece of work and record what happened.
- For
- Practitioners, researchers, founders, and operating leaders.
- What you keep
- A what a findings dashboard leaves out application record you can review, revise, and send.
- What counts as sound
- Names a real setting
- Shows the work before and after
- Records exceptions
- Uses an observable result
- Ends with keep, revise, or stop
The result is a working analysis. Check it against source evidence and qualified judgment.
Nothing entered here is stored or sent. Review the prompt before sharing confidential, personal, patient, or privileged information.
Review the prompt
You can leave any field blank. The prompt will mark it as not provided.
If the record survives your review, send the question, evidence, unknowns, and requested next step.