• Control Panel Header

  On the Control Panel header, you can do the following:

  1. View basic information such as the control's name, description, status (e.g., Fail), category (e.g., Administrator), tenant, and last scan time.
  2. View and change the severity level of the control. To learn more, see Updating the Control Severity.
  3. Enable or disable the control.

  

  Close
• Remediation Tab

  On the Remediation tab, you can do the following:

  1. View the steps to remediate your organization's security posture from potential threats. A link redirects you to remediation steps in the application's help documentation.
  2. View information about the impact on the user's experience after you remediate the misconfiguration.
  3. View information about potential security risks if the security posture is not configured per the recommended policy.
  4. View information about the MITRE ATT&CK tactic and techniques to understand the threat behavior and attack movement.

  

  Close
• Compliance Tab

  On the Compliance tab, you can do the following:

  1. Search for a compliance framework by its name.
  2. View a list of all the compliance frameworks the control is mapped to. For each framework, you can view:
     • Name: The name of the compliance framework.
     • Category: The category of the controls within the framework. This information helps organizations understand the types of controls to be implemented across different areas of their operations.
     • No.: The compliance control number assigned to the control within the framework. This number helps organizations reference and implement controls systematically.

  

  Close
• Assets Tab

  On the Assets tab, you can do the following:

  1. View the violation description that informs why the policy failed or what was evaluated.
  2. View the number of assets by their status. The asset status can be one of the following:
     • Fail: The assets failed to comply with the policy.
     • Partial: The assets partially comply with the policy. For example, if a repository in GitHub has multiple branches, and some of the branches are misconfigured, then the status for that repository is Partial.
     • Pass: The assets comply with the policy.
     • Disabled: The assets are disabled.

  The controls are evaluated based on individual assets or global configuration, depending on the capabilities supported on the SaaS platform.

  3. Search for an asset.
  4. Filter the assets by their enablement status, or Pass, Fail, or Partial status.
  5. Export the assets report to a CSV file.
  6. View a list of all the assets scanned against the policy. For each asset, you can view:

     • Asset: The name of the asset. Click the name to expand and view more details such as general information and evidence. Click Evidence, and then click Copy to copy the evidence, or click Download to download it as a JSON file.

       See image.

       Close

     • Status: The status of the asset.
  7. Enable or disable the asset.

  The assets list is displayed depending on the platform. No assets are displayed for a global configuration.

  

  Close
• Audit Log Tab

  On the Audit Log tab, you can view details of all the changes made to the control.

  

  Close

If the status of a policy is pending, the policy is not displayed on the Posture page.