Executive managed security overview
▼Security posture across endpoint, identity, awareness and information protection for the period.
Overall posture
Good
Trending up
Open incidents
2
6 resolved this period
Endpoints protected
242 / 248
97.6% coverage
Outstanding actions
5
1 overdue
Product coverage
▼Managed security services active for this client.
Managed EDR
ToolingvPossible Managed EDR
StatusActive
Scope242 / 248 endpoints
Managed ITDR
ToolingMicrosoft Entra
StatusActive
Scope198 identities
Security Awareness Training
ToolingManaged programme
StatusActive
ScopeMonthly
Managed ISPM
ToolingIdentity posture
StatusActive
ScopeWeekly review
Incident summary
▼Security incidents detected and handled during the period.
Incidents by severity
Distribution across the period
1 critical, 2 high, 3 medium, 2 low.
Incidents by status
Resolution progress
6 resolved, 2 in progress.
Incident register
| Ref | Summary | Category | Severity | Status | Raised | Site |
|---|---|---|---|---|---|---|
| INC-2041 | Suspicious sign-in blocked | Identity | High | Resolved | 02 Jul | Northern Office |
| INC-2044 | Malware quarantined on endpoint | Endpoint | Medium | Resolved | 05 Jul | Melbourne Office |
| INC-2049 | Impossible travel alert | Identity | Medium | Resolved | 08 Jul | Regional Office |
| INC-2051 | Phishing email reported | Low | Resolved | 11 Jul | Melbourne Office | |
| INC-2055 | Unusual mailbox rule created | Identity | High | In progress | 16 Jul | Community Services Centre |
| INC-2058 | Endpoint isolation — ransomware canary | Endpoint | Critical | Resolved | 18 Jul | Northern Office |
| INC-2061 | MFA fatigue attempt | Identity | Medium | In progress | 21 Jul | Melbourne Office |
| INC-2064 | Legacy protocol sign-in attempt | Identity | Low | Resolved | 24 Jul | Regional Office |
Endpoint health (Managed EDR)
▼vPossible-managed detection and response coverage.
Agents healthy
242
Agents needing attention
6
Threats neutralised
3
This period
Tamper protection
On
Identity findings (ITDR & ISPM)
▼Identity threat detection and posture management findings.
MFA coverage
96%
4 accounts outstanding
Privileged roles
11
2 removed this period
Legacy auth attempts
Blocked
ISPM score
Good
ISPM findings
| Finding | Area | Severity | Status |
|---|---|---|---|
| Service accounts without MFA | Identity | High | Open |
| Legacy authentication enabled | Identity | High | Open |
| Guest accounts unreviewed (30d) | Governance | Medium | Open |
| Stale privileged role removed | Identity | Medium | Resolved |
Security Awareness Training
▼Training completion and phishing simulation results (fictional).
Training completion by site
% of staff who completed monthly module
88–100% completion by site; 6 staff outstanding.
Phishing simulation results
Response to July simulation
71% reported, 23% no action, 6% clicked.
Actions — who does what
▼Clear ownership across vPossible Managed EDR, vPossible and the client.
vPossible SOC actions
- 24/7 SOC monitoring & triage
- Isolated endpoint on ransomware canary
- Escalated 2 identity alerts to vPossible
vPossible actions
- Reviewed & closed 6 incidents
- Removed 2 dormant privileged roles
- Scheduling legacy-auth disablement
Client actions
- Complete SAT for 6 outstanding staff
- Approve MFA enforcement on service accounts
- Confirm offboarding for 1 departed user
Remediation register
▼Open, overdue and completed remediation items with owners and due dates.
Open
4
Overdue
1
Completed (period)
2
Avg age (open)
9 days
Remediation items
| Ref | Action | Area | Priority | Status | Due | Owner |
|---|---|---|---|---|---|---|
| REM-311 | Enforce MFA on 4 remaining service accounts | Identity | High | Open | 31 Jul | vPossible |
| REM-312 | Disable legacy authentication tenant-wide | Identity | High | Open | 05 Aug | vPossible |
| REM-313 | Complete SAT for 6 outstanding staff | Training | Medium | Overdue | 15 Jul | Client |
| REM-314 | Review mailbox forwarding rules | Medium | Open | 02 Aug | vPossible | |
| REM-315 | Patch 3 endpoints below baseline | Endpoint | Medium | Open | 29 Jul | vPossible |
| REM-316 | Remove 2 dormant privileged roles | Identity | High | Completed | 12 Jul | vPossible |
| REM-317 | Enable tamper protection on all devices | Endpoint | Low | Completed | 09 Jul | vPossible |
Recommendations
▼Recommended next steps
- Enforce MFA on the remaining service accounts and disable legacy authentication.
- Complete outstanding security awareness training for 6 staff.
- Review external mailbox forwarding and guest access monthly.
- Maintain endpoint patch baseline above 95%.