SSPM Posture Score represents a SaaS application’s security posture in terms of a score and a corresponding level. Every SaaS application is assigned a posture level, depending on the calculated posture score.
Netskope uses a proprietary algorithm to compute the posture score of each SaaS application. SSPM computes the posture score based on the number of failed findings considering the severity compared to the total number of findings generated based on SSPM rules enabled in the policy and on the risk score of 3rd Party Apps detected.
SSPM computes the posture score at the lowest level and then propagates up through the levels. While propagating up, the lowest score is taken from the lower level. The posture score is computed at the following levels:
-
Netskope Tenant – calculated at the customer’s Netskope account.
-
SaaS Application Suite – calculated at the app suite level like Microsoft 365, Google Workspace, Salesforce, Atlassian, etc.
-
SaaS Account – calculated at the SaaS application account level that is set up via ‘Configure App Access’.
The posture score and posture levels are mapped as follows:
-
Excellent – posture score ranging from 90 to 100.
-
High – posture score ranging from 75 to 89.
-
Medium – posture score ranging from 60 to 74.
-
Low – posture score ranging from 50 to 59.
-
Poor – posture score ranging from 0 to 49.
-
Unknown – cannot compute the posture score.
-
– The SaaS application doesn’t have a SSPM policy configured, resulting in no findings for the application, and there are no 3rd Party Apps detected for the SaaS application.
– The rules that are part of the SSPM policy have not resulted in any findings, and there are no 3rd Party Apps detected for the SaaS application.
Let us consider an example of understanding the posture score that is computed at the lowest level, i.e. at instance level, and propagated up through the levels. Assume the levels for your tenant is as:
Netskope Tenant > Microsoft 365 (app suite) > My Account (instance)
If the posture score for an individual instance is:
-
Instance-1 – 76
-
Instance-2 – 92
-
Instance-3 – 52
The minimum posture score across all instances, which is 52, will be propagated up the level as the posture score for Microsoft 365 app suite. If this is the minimum score across all the app suites monitored by SSPM, it will become the posture score at the tenant level as well.