Forum Discussion
Solved
Secure Score not Scoring....
Hi there,
I've been using Secure Score for a few months now to test the security baseline and see how customers can get the most out of it. However every Tuesday I do the weekly reports which for the last two weeks are not showing up on my score. You can see at the beginging of last month that it works and all the weekly reports are showing, however a few weeks ago even though I keep spending some 45 mins doing the weekly reports I dont see any score being registered.
Is there something I'm missing, I'm going directly to the report am I surposed to only go to the report via the Secure Score webpage? Any help would be most welcome, I know that it can take upto 48 hours for things to show up but for it to never show up for weeks on end something must be wrong?
Thanks
James
- PM Sent...
I am having the same issues, MS security scorecard not updating after 72 hours. Please can you help.
- Anthony Smith (A.J.)
Microsoft
Hi James and Juan,
I have alerted the development team that the score has not updated recently. For the reports issue please make sure that you are accessing the report from Secure Score by pressing the "review" button. If you are not using the Secure Score user interface and going directly to the report, no points will be provided as the underlying report does not have any telemetry on if you viewed it.
If you are using the review button, please use the feedback link in the bottom right of any Secure Score page to tell us. This way we can get your tenant information which helps us in our investigation.
Hi Anthony,
it has been a long time now since this threat started. I have seen changes happening where a score was given and then suddenly weeks/months later it was removed, without changes, no real hint on what caused the loss of the score.
In one of my tenants I see for example "Turn on audit data recording [Not Scored]" with 15/15 points, but some other items with [Not Scored], that were completed, are really not scored, getting 0 points. This is confusing.
I am responsible for multiple Office 365 tenants (over 30) and I can see changes and differences from one to the other with respect to Secure Score.
Will this Secure Score system be "fixed" in the near future? I would really like to be able to rely on the score. And, if changes are applied by Microsoft that break a previously good working security configuration, then it would be very helpful to receive/see details about it, so that it can be put back in place quickly. It would be very helpful to be able to apply a security configuration, really get the score and then be able to rely on it.
Hello,
I am watching this post for a while now, but it seems this is not fixed yet.
At least, not for me. Several items are not updated.
A few examples:[Not Scored] Enable audit data recording (using it almost weekly)[Not Scored] Set outbound spam notifications (set months ago, and a few weeks ago again)[Not Scored] Do not use transport rule to external domains (only 1 rule exist for preventing client client rules to external)
[Not Scored] Do not use transport white lists (no whitelists exist)Also, there are several rules that can only be applied to Enterprise environments, we have Business Premium.
Thx.
Andreas
- Anthony Smith (A.J.)
Hi Andreas,
The items you called out below don't provide points as we don't have the telemetry for these controls wired into Secure Score. When we do, the points will be added if you have done this action. This is the case for all items that start with "[Not Scored]"
For you comment on the other controls that apply only to enterprises that you don't have as part of Business Premium, we want to show you the entire list of security features hence you see things you don't own. However, the denominator of your score is only based on the features you can use.
Suggestion - it would definitely reduce the confusion if you removed the [Not Scored] items from the Score Analyzer -> Incomplete Actions tab. Just make a 3rd tab for all of the recommendations that you don't have wired up yet.
no one having the same problem or no one using Secure Score :)
- Anthony Smith (A.J.)
Hi James,
You need to access the reports from the Secure Score portal to get the points. If you go directly to the source like the Azure Active Directory portal, Secure Score will not understand that you have reviewed the report.
Sorry for the delay on the reply.
Hi Anthony,
Thanks for the reply but I've going from the portal and it's hit and miss if it shows up in the Secure Score or not. Is there any way to be 100% sure that it has registered results towards the Secure Score?
Also is this going to change in the future so that if customers go directly to the reports they still get the score as it adds quite a bit of time to each task to go to Secure Score and click each one just so it registers the score?
Thanks
James
