Create SSPM Policies to Monitor SaaS Application Settings

To navigate to the Settings Management view, select
SSPM
Security Configurations
.
Select the
Policies
tab.
Add Policy
.
A Policy Creation page opens.
On the
Basic Information
tab, specify the following information about your policy:
Although the
Basic Information
tab shows a Notifications field with your email address, be aware the SSPM does not currently send email notifications. A daily digest email that SSPM sends to application owners includes information about failed policies. You can also view policy status on the
Security Configurations
page.
The
Name
of the policy. This name will appear in the list of policies on the
Policies
tab of the
Settings Management
page. For this reason, specify a meaningful name that will be distinguishable from the other policies in the list.
A
Description
of the policy. After you create the policy, this description will appear on the details page for the policy. Describe the purpose of the policy for administrators who might be viewing the policy later.
The
Severity
of the policy, so administrators will know how seriously they should treat violations of the policy. You can specify one of the following severity levels, which will be shown for the policy on the
Policies
tab of the
Settings Management
page.
High
— Means that violations of this policy indicate a significant vulnerability in your security posture. Specify this severity level if the misconfigured settings that SSPM detects for this policy have the potential to be exploited and result in significant damage if left unaddressed.
Medium
— Means that violations of this policy will indicate issues that pose a potential security risk, but are less severe than the High severity level. Remediation of these issues should be prioritized, but they may not require immediate attention.
Low
— Means that violations of this policy will have a minimal impact on security or are relatively low-risk. Specify this severity level to indicate that, while the misconfigured settings might not pose an immediate threat, they should still be addressed to maintain a healthy security posture.
Go to the
Next
tab of the Policy Creation page to configure the policy.
On the
Config Selection
tab, select the applications and settings that SPPM will monitor for this policy.
Locate the settings that you want SSPM to monitor for this policy. To help you locate the settings that you want to monitor, you can filter the table list by application or by the current setting status.
To select a setting, set its
Alert
toggle to the on position.
When you have finished selecting all the settings that you want SSPM to monitor for this policy, go to the
Next
tab of the Policy Creation page to verify the policy configuration.
Review the information on the
Summary
tab to verify that the information is correct. If necessary, you can
Edit
the information. When you are sure that this is the policy that you want to create,
Save
the policy.