Forum Discussion
Solved
Secure Score not Scoring....
Hi there,
I've been using Secure Score for a few months now to test the security baseline and see how customers can get the most out of it. However every Tuesday I do the weekly reports which ...
- PM Sent...
Hello,
I am watching this post for a while now, but it seems this is not fixed yet.
At least, not for me. Several items are not updated.
A few examples:
[Not Scored] Enable audit data recording (using it almost weekly)
[Not Scored] Set outbound spam notifications (set months ago, and a few weeks ago again)
[Not Scored] Do not use transport rule to external domains (only 1 rule exist for preventing client client rules to external)
[Not Scored] Do not use transport white lists (no whitelists exist)
Also, there are several rules that can only be applied to Enterprise environments, we have Business Premium.
Thx.
Andreas
Anthony Smith (A.J.)
Microsoft
MicrosoftHi Andreas,
The items you called out below don't provide points as we don't have the telemetry for these controls wired into Secure Score. When we do, the points will be added if you have done this action. This is the case for all items that start with "[Not Scored]"
For you comment on the other controls that apply only to enterprises that you don't have as part of Business Premium, we want to show you the entire list of security features hence you see things you don't own. However, the denominator of your score is only based on the features you can use.
Suggestion - it would definitely reduce the confusion if you removed the [Not Scored] items from the Score Analyzer -> Incomplete Actions tab. Just make a 3rd tab for all of the recommendations that you don't have wired up yet.
Hi Anthony,
OK, this makes things clear. So for now it is not possible to achieve maximum points.
Concerning the difference between Enterprise and Business Premium, indeed when the default "Balanced" target is set only those doable actions are shown. Thanks for your answers.
