Workouts are sorted by their impact, so you always know what your next best action is when it comes to improving your security posture
Autobahn Fit's Cyber Fitness Workouts (Workouts) are actionable remediation guides that help you easily and quickly close vulnerabilities, even if you do not have security expertise. Autobahn Fit groups vulnerabilities by their root cause, and that's what Workouts address. This way, you can close multiple issues with one single action.
Table of content
- Get an overview of all your Workouts
- Prioritize which Workout to address first
- Update Workout status in bulk
- Start remediating issues with the Workout
- Export Workout as a PDF
- Export associated assets as Excel file
- Send a Workout to Jira
- Customize a Workout
- Share your feedback
1. Get an overview of all your Workouts
The Workouts page is divided into two tabs:
-
My workouts: Workouts assigned to you.
-
Organization workouts: Workouts applicable to your whole organization.
In either tab, the page is divided into three sections:
- To-do workouts: list of Workouts that need work, sorted based on their Hackability reduction score. By default, all open Workouts will be added to this section. Workouts listed here contribute to the Hackability Score of the organization.
- Risk-accepted workouts: list of Workouts containing issues that do not require immediate fixing for various reasons. For instance, these issues may be on assets deemed unimportant by the company. To move Workouts to this section, mark your issues, or the Workout, as "Risk-accepted". Workouts marked as "Risk-accepted" do not contribute to the Hackability Score so they don't have the "Hackability reduction" value.
- Completed workouts: list of Workouts which issues have been successfully resolved and no longer pose a threat to the organization.
- Effort: Autobahn Fit categorizes the Workout based on the effort needed to remediate its associated issues. The effort categories are:
- Small: Remediation normally takes place on one surface (usually the application itself) and it generally does not require in-depth sysadmin knowledge to perform
-
Medium: Remediation generally takes place on multiple surfaces (application and operating system level), and/or it generally requires in-depth sysadmin knowledge to perform
-
Hackability reduction: The value of how much the remediation of the issues associated to this Workout will decrease your Hackability Score.
-
Number of host(s): The number of hosts affected by issues within this Workout.
For example, if you go to your Workout page and see that you have two Workouts with Hackability Reduction as Highest, you know you need to start with these. However, if you're having a long day, you may choose to start with the one with small effort and leave the medium effort one for another day!
3. Update Workout status in bulk
You can update the Workouts status for multiple Workouts by:
1 - Select the Workouts by ticking the checkboxes.
2 - Click the Mark workout as button on top of the table and select the Workout status accordingly.
The changes you made will be implemented in the next data refresh.
4. Start remediating issues with the Workout
Each Workout is split into two tabs:
- Workout
- Setup
4.1. Workout - Follow the step-by-step remediation guide
The Workout tab gives you information about the root cause that you are addressing with the Workout. You can see a detailed description of the issue, understand the potential risks if the issue remains unresolved, and see the objectives the Workout aims to achieve.
This page also displays the easy-to-follow remediation guide to remediate the issues listed on the Setup tab.
Some Workouts may have multiple remediation options, for example for different operating systems. Choose the one that applies to you.
4.2. Setup - See the issues you will be fixing, and the hosts affected
Each Workout can be used to remediate different issues with the same root cause. The Setup section provides a comprehensive list of issues that will be solved through this Workout.
Since issues reside on assets, it is important to implement the remediation guides in all assets listed in this table.
5. Export Workout as PDF
If you want to export the Workout details into PDF format, you can do so by clicking the Download button -> Workout (PDF).
The PDF will include the Workout’s mitigation steps/options.
6. Export associated assets as Excel file
If you want to export the asset list into Excel (XLSX) format, you can do so by clicking the Download button -> Assets (xlsx).
7. Send Workout to Jira
To integrate Autobahn Fit with your current processes, you may want to create a ticket in Jira for a the Workout. Before doing so, you will need to integrate Autobahn Fit with Jira - check this article for more information.
Once the integration is enabled, you can send the Workout to a Jira ticket easily:
1 - Click the Send to button -> Jira. A drawer consisting of fields to be filled will be opened.
2 - Choose if you want to include all the Workout assets or customize asset selection by clicking the radio button next to the option.
3 - Fill all the mandatory fields. Please note that the fields displayed here follow the fields selected in your Jira projects.
4 - After the mandatory fields are filled, click the Send to Jira button. The Workout PDF will be attached to the ticket. If you’ve customized the asset selection, only the selected assets will be included in the PDF file.
5 - Navigate to your Jira project to check if the ticket has been created.
8. Customize Workout
To customize a Workout according to your organization's specific requirements, such as infrastructure, environment, and processes, utilize the Edit Workout feature. Refer to this page for detailed insights on the text structure of the Workout editor.
Note: this feature is only visible to Enterprise customers.
9. Share your feedback
We are continuously improving our Workouts, and we are more than happy to hear your feedback. Do not hesitate to reach out to us via the added “Share feedback” button on the Workout Detail page.
1 - Click the Feedback button.
2 - Add your comment regarding the Workout in the Detail field. Then click the Send button to submit your insights.
