Deprecated Features In Hotfix Release 113.1.0

Deprecation of older versions of SSPM Compliance Standards and Predefined Rules

Starting 15 Apr, 2024, the following compliance standards and predefined rules will be deprecated in SSPM. If any existing SSPM policies include the below compliance standards and predefined rules, it will be replaced with the latest version of the same compliance standards and predefined rules, if available.  If there are no similar compliance standards and predefined rules, it will be deleted from the policy. This can trigger new evaluations and the status of compliance may change because of a new set of rules that gets included in the policy.
List of to be deprecated compliance standards:

• BPR-GITHUB

• BPR-SALESFORCE

• BPR-SERVICENOW

• BPR-WORKDAY

• CIS-Microsoft365_1.5.0

• CSA-CCM-3.0.1

• ISO-27002-2013

• NIST-800-53-4

• PCI-DSS-3.2.1

List of predefined rules for the apps to be deprecated:

• Microsoft 365 – Attachments with commonly malicious file types should be blocked

• Microsoft 365 – Users should be notified when a received mail is quarantined as spam

• Salesforce – Ensure XSS protection is enabled

• Salesforce – Configure CORS allowlist origins

• Salesforce – Enable single sign-on