Organization Goals enable administrators to establish, target, and track security training objectives across the entire organization. By setting goals based on points, labs, or learning paths, admins can foster a culture of secure coding and monitor progress through automated or on-demand reporting.
The metrics that can be targeted within a Goal include:
- Accumulated Points
- Completed Security Labs
- Completed Learning Paths (General or Specific)
- ThreatCanvas Model Risks
Create an Organization Goal
Step 1: Navigate to the Orgs tab and click on the Details button next to the org’s name.
Step 2: Scroll down to the Organization Goals tab and click on Create Goal.
Step 3: Select the product to create the goal on: Training & Learning Paths (SecureFlag) or Threat Modeling (ThreatCanvas).
If you select SecureFlag, you can choose from the following Goal Types:
- Score Points: Users must accumulate a specific number of points.
- Complete Labs: Users must complete a certain number of security labs.
- Complete Learning Paths: Users must complete any learning paths.
- Complete Specific Learning Paths: Users must complete designated learning paths.
If you select ThreatCanvas, the Goal Type is:
- Models Without Open Risks: Threat models must have no open risks above a defined threshold.
Step 4: Select your desired goal type and click Next.
Step 5: Select the Scope type to define the goals.
If you select SecureFlag, you can select the Scope Type to define which models the goal applies to:
- All Users: Goal applies to all users in the organization.
- Specific Teams: Goal applies to users in selected teams. (Tick the teams you wish to include).
- Users with Tags: Goal applies to users with specific tags. (Type in and select the relevant user tags).
If you select ThreatCanvas, you can select the Scope Type to define which models the goal applies to:
- All Models: Goal applies to all the threat models.
- Models in Project: Goal applies to models in a specific project. (Tick the projects you wish to include).
- Models with Tags: Goal applies to models with specific tags. (Type in and select the relevant model tags).
Then, click Next.
Step 6: Select the Target. Based on the goal type you’ve selected, enter the numerical value or specific path required for completion. Once entered, click Next.
Note: This will be different for each goal. The following is an example for Score Points goal.
Step 7: In this settings, you can
- Set the Goal Name
- An optional Description
- Start and End dates.
- An optional Reporting Frequency (Daily, Weekly, or Monthly).
Then click the Create Goal button.
Review Existing Organization Goals
Step 1: Navigate to the Orgs tab and click on the Details button next to the org’s name.
Step 2: Scroll down to the Organization Goals tab and click on Show Goals.
Step 3: Filter the list by status: Active & Upcoming, All Goals, Active Only, Expired Only, or Upcoming Only.
Step 4: The results will display the Goal Name, Type, Scope, Progress, Timeline, and Status.
Step 5: To see further details of a specific goal, click Details to expand the view for a full summary of the goal parameters.
Step 6: You can click the Refresh button to see the updated goals.
Sharing Goals
Download a CSV Report
You can download a CSV file of the report by clicking on the Name of the goal you wish to investigate. Then, you can click the Report button to download the progress data in CSV format.
Email Reports and Reporting Frequency
You can email the report and select reporting frequency by clicking on the Name of the goal, and then clicking the Mail icon.
A modal window will open in which you can:
- Select the Reporting Frequency (Daily, Weekly, or Monthly)
- Enter the email addresses of the recipients.
Once done, click Save Settings.
Delete an Organization Goal
To delete a goal, you can simply click the red Delete icon next to the name of the goal.
A modal window will open asking for a confirmation and you can click the Delete button to delete the goal.
Important: Deleting a goal cannot be undone. All tracking associated specifically with this goal entry will be removed.