On 11/13/14, 5:19 AM, Martin Preisler wrote:
----- Original Message -----
> > From: "Jan Ruzicka" <jan.ruzicka(a)comtechmobile.com>
> > To: "SCAP Security Guide"
<scap-security-guide(a)lists.fedorahosted.org>
> > Sent: Wednesday, November 12, 2014 6:51:21 PM
> > Subject: Re: Waiver support in HTML report
> >
> > Hi
> >
> > The report looks great.
> >
> > Inconsistency of graph direction Rule result breakdown vs Failed rules by
> > severity breakdown caught my eye.
> > The Rule result breakdown shows more important issues to the right, but the
> > Failed rules by severity breakdown to the left.
> > The whole document seems to be bringing focus to the right side.
So the failed rules should be on the left and passed on the right?
Or can you suggest another modification that would fix it?
It's more about consistency.
The "Rule result breakdown" goes from green (passed) to red (failed) to
orange ("other"), which is fine. Having the passed rules first seems
highly ideal -- I'd rather have control assessors see green before red.
This makes the report less alarming.
Immediately below, under "Failed rules by severity breakdown," some of
the same colors are reused from the "rule result breakdown." This
section uses red for "high", the same color of orange for "medium."
Because the same colors are used, it took a double take to recognize the
"1 high" severity finding doesn't correlate to the "11 failed"
rules
immediately above. Slightly changing the colors should take care of this.