{
  "docId": "019dd923-5eff-723e-9be5-920f70c17c85",
  "docSlug": "c5cd5f7c0292fe57",
  "documentTitle": "2023 conf SEC1096C",
  "authorId": "Splunk",
  "authorName": "Splunk",
  "documentKindSlug": "consulting-deck",
  "documentKindLabel": "Consulting deck",
  "sourceTypeSlug": "strategy_consulting",
  "sourceTypeLabel": "Strategy consulting",
  "presentationDate": null,
  "orientation": "landscape",
  "aspectRatio": 1.778,
  "pageNumber": 7,
  "pageCount": 52,
  "prevPage": 6,
  "nextPage": 8,
  "slideType": "other",
  "function": "present_framework",
  "density": "balanced",
  "nDataPoints": 0,
  "notes": "The slide uses a process diagram to explain the flow from Data Source to Alert via the Risk Index.",
  "elementsJson": [
    "headline_text",
    "process_diagram",
    "bullet_list",
    "footnote",
    "photo"
  ],
  "metadataConfidence": 0.95,
  "imagePath": null,
  "slideHref": "/slides/019dd923-5eff-723e-9be5-920f70c17c85/7",
  "deckHref": "/decks/019dd923-5eff-723e-9be5-920f70c17c85",
  "deckJsonHref": "/decks/019dd923-5eff-723e-9be5-920f70c17c85.json",
  "deckAnchorHref": "/decks/019dd923-5eff-723e-9be5-920f70c17c85#slide-7",
  "components": [
    {
      "bbox": {
        "h": 0.3,
        "w": 0.35,
        "x": 0.05,
        "y": 0.25
      },
      "kind": "diagram",
      "text": "Flow diagram showing Data Source -> Risk Index -> Alert",
      "attrs": null,
      "subkind": "process",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "8ba6d830-dc3e-4e98-a4c3-5e0812eb0eee",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.6,
        "w": 0.5,
        "x": 0.42,
        "y": 0.25
      },
      "kind": "list",
      "text": "Risk Adaptive Action, Risk Rule (RR), Risk Object, Threat Object, Risk Incident Rule (RIR), Risk index, Risk Data Model",
      "attrs": null,
      "subkind": "bullet",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "831988d9-d240-47a0-87cb-7b8911eef523",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.05,
        "w": 0.35,
        "x": 0.05,
        "y": 0.55
      },
      "kind": "source-note",
      "text": "Image Source: The Essential Guide to Risk Based Alerting by Haylee Mills",
      "attrs": null,
      "subkind": null,
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "abdf9c3c-4d5e-43fc-8186-ef17adb626f8",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.05,
        "w": 0.15,
        "x": 0.42,
        "y": 0.15
      },
      "kind": "title",
      "text": "Key Terms:",
      "attrs": null,
      "subkind": "headline",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "4567e26c-8728-4d22-aaa5-b1c81c1d2268",
      "frameworkName": null,
      "frameworkSlug": null
    },
    {
      "bbox": {
        "h": 0.05,
        "w": 0.3,
        "x": 0.05,
        "y": 0.15
      },
      "kind": "title",
      "text": "RBA in 30 Seconds...",
      "attrs": null,
      "subkind": "headline",
      "toolName": null,
      "toolSlug": null,
      "confidence": null,
      "componentId": "5f01133e-04c1-4535-984f-caa390ed5758",
      "frameworkName": null,
      "frameworkSlug": null
    }
  ],
  "metrics": [],
  "tools": [
    {
      "name": "List presentation",
      "slug": "list-presentation",
      "agent": null,
      "layer": "slide",
      "matchId": "7e175b1b-c3ac-4eae-b60e-7e9304df066e",
      "evidence": "list/bullet: Risk Adaptive Action, Risk Rule (RR), Risk Object, Threat Object, Risk Incident Rule (RIR), Risk index, Risk Data Model",
      "confidence": 0.7
    }
  ],
  "frameworks": [],
  "arcBeats": [
    {
      "to": 14,
      "from": 7,
      "beatId": "665ec750-d8bc-4530-bfb1-382979bbf648",
      "arcName": "The Consultant's Gambit",
      "arcSlug": "consultants-gambit",
      "beatName": "Problem & Complication",
      "beatSlug": "consultants-gambit-problem-complication",
      "evidence": "The deck presents a health check and diagnosis of the current Splunk environment.",
      "position": 1,
      "confidence": 0.8,
      "parentBeatName": "Complication",
      "parentBeatSlug": "complication"
    }
  ],
  "loops": [],
  "imagePathAlt": null,
  "thumbSrc": null,
  "thumbSrcAlt": null,
  "locked": true
}