Vulnerability Management & Patch Cadence Intelligence
ArcadiaHealth Systems · Q1 2024 · 14,000 endpoints, 3,400 cloud workloads
Reporting Period:
Q1 2024 (12 weeks)
Q4 2023
Q3 2023
KEV-Positive Open Vulns
23
+6 from freeze
EPSS-Weighted Exposure Days
18.4K
-31% Week 9
Net Risk Velocity
-83
vulns/week avg
MTTR Critical Assets
4.2
days (target: 5d)
SLA Compliance Rate
87.3%
-9% during freeze
Scan Coverage
94.8%
of asset inventory
Vulnerability Discovery Rate vs. Remediation Rate (Net Risk Velocity)
Week 6-8 Alert:
EHR migration change freeze halted patching. Net Risk Velocity swung from -83 to +312 vulns/week peak. Emergency patch cycle Week 9 restored negative velocity.
Mean Time to Remediate (MTTR) by CVSS & Asset Criticality
SLA Compliance by Tier
EPSS-Weighted Exposure Days by Asset Class (12-Week Trend)
Top 10 Open Vulnerabilities (EPSS × CVSS Score)
Vulnerability Reopen Rate by Team
Cloud Ops:
26.4% reopen rate exceeds 15% threshold — inadequate root cause analysis.
High-Priority Vulnerability Detail View
CVE ID
CVSS
EPSS
KEV
Asset Class
Criticality
Exposure Days
Owner Team
Status
Risk Acceptance Backlog Waterfall (Q1 2024)
Scan Coverage by Asset Segment
Open Vulnerabilities by EPSS Score Threshold (12-Week Trend)