A DSA is a document that is issued by Dell Technologies to address security vulnerabilities in its products. A DSA contains information about the affected products, important security information, and recommendations to address the issue. For more information, see https://www.dell.com/en-us/shop/security-center/cp/security-and-trust-center.
A DTA is a proactive notification by Dell Technologies for issues that may affect your IT operations such as data loss, data unavailability, loss of system functionality, or anything that could result in a significant safety risk. A DTA provides the steps to eliminate or minimize the impact of such issues.
For information about setting up email notification for DSAs and DTA, see Set up email notifications for security and technical advisories article.
The heads-up display for the HEALTH & RISK tab displays the number of critical, high, medium, and low DSAs and DTAs using interactive dials. You can hover over the sections of the dial to view the number of advisories in each category or click the center of the dial to go to the corresponding tab.
Figure 1: Heads-up display
You can view the information available for the advisories using the Table or Visualizations view. The default filters applied for the Dell Security Advisories and Dell Technical Advisories tabs are as follows:
Figure 2: Table view
Figure 3: Visualizations view
To review and update the remediation status for an advisory, perform the following:
Figure 4: Advisory ID column
Figure 5: Review advisory details
Figure 6: Manage Affected Products section
Figure 7: Modify Resolution window
The RESOLUTION TRACKING column is updated for the selected products. The advisory status that is displayed in the STATUS column in the Table view is also updated.
By default, MyService360 displays advisories that are issued during the last two years. But you can view advisories that are issued during the last three years. So, you can view advisories that were already reviewed and remediated. It is recommended that you identify and update the status of historical advisories that you may have already addressed or remediated.
If you have already implemented the resolution that is recommended in an advisory, you can update the status of the advisory as Resolution Completed. While updating the status of an advisory, enter notes to record key details for tracking and auditing purposes.
The following table describes the strategies that you can use to review and remediate advisories:
Table 1 Recommended strategies
Strategy | Description |
---|---|
Product Issues |
If an issue is observed in a specific product family, review the advisories that are issued for that product family. This enables you to verify if the issues are resolved through the remediation that is provided in the advisories. |
Highest Risk |
Review and remediate advisories in the following order of impact:
|
Product family |
Prioritize the advisories based on the product families that you want to remediate first. |
Low complexity validation |
Document advisories that are only dependent on being at a certain code level to resolve |
Advisory Age |
Prioritize advisories based on the number of days since the advisory was issued. |
For a quick video demonstrating the advisory management features, go to the MyService360 Knowledge Center.