Change Risk Score for Discovered SaaS Apps
Table of Contents
Change Risk Score for Discovered SaaS Apps
Learn how to customize the risk score in SaaS Security
Inline to match your organization’s independent risk assessment
of the SaaS application’s vulnerabilities.
SaaS Security Inline provides risk scoring to help you assess the security posture and enterprise
readiness of a given SaaS application. The
risk score is between 1 (low risk) and 5 (high risk) and is based on compliance
attributes. Some SaaS apps might temporarily have no risk score
because the SaaS apps are pending risk assessment by SaaS Security Inline. You
cannot change the risk score of Discovered SaaS applications for which the risk
score is unknown.
When a given SaaS app
in the App Dictionary is
a known industry SaaS app but does not yet have a risk score due
to pending risk assessment by SaaS Security Inline, the risk score
indicates NA for score, Under
Research in the legend, and Application Compliance is under research in Compliance.
There
are two ways to change a risk score for SaaS applications:
- Individual (Manual) Risk Score—Manually change the risk score for individual SaaS applications without changing the underlying calculation method.
- Global (Custom) Risk Score—Adjust the weights for the underlying attributes and allow SaaS Security Inline to recalculate and apply the risk score automatically and uniformly across all SaaS applications.
To identify whether you’ve
changed a SaaS application’s risk score from its default assigned
by SaaS Security Inline, simply move your cursor over the risk score
to display Default, Manual,
or Custom.
Change Individual Risk Score
SaaS Security Inline enables you to change
the default risk score for any SaaS application. Although the risk
score represents attributes that reflect the security posture of
a given SaaS application, your organization might view a specific
SaaS application as having an overall higher or lower security vulnerability
due to supplemental information discovered in the course of your
assessment. If you later reevaluate the SaaS application’s security
posture, you can reset to the default risk score or revise as necessary.
- Navigate to SaaS Security Inline.To navigate to the Discovered Applications view, select Applications.Select the SaaS application with the risk score you want to change.Select a new risk score. In the Actions column for the selected SaaS application, click the score meter icon to display the risk score scale. Select a new score (1-5).To restore a SaaS application to its default risk score, click Restore to Default.
Change Global Risk Score
By default, SaaS Security Inline assigns unequal weights to the attributes that underlie each SaaS application’s risk score. Key attributes have a higher impact on a SaaS application’s risk score: the risk score is derived by applying different weights to each attribute and calculating the risk score based on whether the SaaS application meets those compliance and security standards.Although the default weights that SaaS Security Inline assigns reflect a concerted effort to balance risks, organizations perceive risk differently. For this reason, SaaS Security Inline enables you to assign your own, weight (formula) to each attribute to reflect the attributes that are more important to your organization. SaaS Security Inline recalculates the risk score for all SaaS applications based on the new weights, then displays the updated risk score for each SaaS application and updated dashboard metrics. This process can take up to two minutes to complete. For example, if your organization is a healthcare provider, you might want to assign the HIPPA attribute a heavier weightage.- Navigate to SaaS Security Inline.To configure global risk scoring, select .Assign a weight ( 0-100) to each Compliance attribute for a combined total of 100.Assign a weight ( 0-100) to each Security and Privacy attribute for a combined total of 100.Toggle Use Custom Weights, then SaveTo restore the attributes to their default weights and reset all SaaS applications to their default risks scores accordingly, set the toggle to the off position, then Save.
