Customizing Posture Score

The Posture Score shows your system’s overall security posture. Customizing the Posture Score allows you to fine-tune scoring criteria based for your environment. These settings not only impact the Posture Score but also influence other security metrics, such as the total number of failed findings and 3rd Party App assessments. Changes made to these settings are reflected across multiple areas in the UI and are recorded in audit logs for tracking. Follow the procedure below to customize your Posture Score.

Procedure

1. Log in to your Netskope tenant and navigate to API-enabled Protection > Security Posture SaaS > Apps page.

2. Click on the Settings option in the top right corner of the page to open the Settings sidebar.

   

3. The Settings sidebar lets you customize how your Posture Score is calculated. You can enable or disable the following options based on your needs. By default, all options are disabled.

   • Exclude Approved 3rd Party Apps – excludes 3rd Party Apps that have already been approved from impacting your Posture Score. 

   • Exclude Risk Accepted 3rd Party Apps – Risk Accepted 3rd Party Apps are those that have wide range of permissions and scopes, but the risks have been acknowledged and accepted by the organization. This option excludes those Risk Accepted 3rd Party Apps from impacting your Posture Score.

   • Exclude Muted Findings – Muted findings refer to findings that have been acknowledged and muted from appearing in the findings. This option excludes those muted findings from impacting your Posture Score.

     

4. Add a note explaining the reason for the modifications. This helps team members and stakeholders understand the context and purpose of the custom settings, ensures clarity for future reference, and is also recorded in audit logs.

5. Save the changes.

6. Click Yes, confirming the changes when the warning message is seen.

   

Points to Note

• You will see the banner at top of Overview, Apps, 3rd Party Apps, and Findings page with the customized settings details.

  

• Posture Score updates instantly after customization.

• The Posture Score calculator processes data for the current day, and the updated score applies from today onward.

• The audit log event [SSPM] Update Posture Score Settings is triggered when a user modifies the posture score settings. For additional details, refer to the Supported Audit Log Events section.

References

• Understanding Posture Score

• How to Improve Posture Score

• Supported Audit Log Events