For each discovered Data Store, even before you attempt to connect with it, Netskope DSPM will provide preliminary Configuration Analysis feedback on the following:
- Publicly Inaccessible: is this Data Store properly-restricted or visible beyond your network?
- Encryption: does the Data Store take advantage of available encryption opportunities?
- Backup: is the Data Store enrolled in a regular backup cadence?
For Data Store Types which cannot supply some of the above metrics, the platform will provide visual feedback.
Once the above metrics are available, Netskope DSPM will calculate a Misconfiguration Risk per Data Store, which initially aggregates the above three metrics, then takes into account the amount of detected sensitive data once you’ve started scanning the Data Store.
As your Data Stores are regularly-scanned, their Configuration Analysis metrics will be updated, providing you with accurate and timely insight into any changes to your Misconfiguration Risks.
Due to the nature of cloud object storage services such as AWS S3 and Google Cloud Storage, Configuration Analysis metrics are retrieved as part of Data Store Discovery instead of during data store scans.
Data Store Discovery is run regularly during the day, or it can be manually initiated by navigating to the Data Store Inventory and clicking the Discover My Data Stores button. Depending on other activity in conjunction with Data Store Discovery, updated metrics may take up to 60 minutes to reflect within the UI and Open API.