Change Risk Score for Discovered SaaS Apps

Learn how to customize the risk score in SaaS Security Inline to match your organization’s independent risk assessment of the SaaS application’s vulnerabilities.
SaaS Security Inline provides risk scoring to help you assess the security posture and enterprise readiness of a given SaaS application. The risk score is between 1 (low risk) and 10 (high risk) and is based on compliance attributes. Some SaaS apps might temporarily have no risk score because the SaaS apps are pending risk assessment by SaaS Security Inline. You cannot change the risk score of Discovered SaaS applications for which the risk score is unknown.
When a given SaaS app in the App Dictionary is a known industry SaaS app but does not yet have a risk score due to pending risk assessment by SaaS Security Inline, the risk score indicates
NA
for score,
Under Research
in the legend, and
Application Compliance is under research
in
Compliance
.
There are two ways to change a risk score for SaaS applications:
  • Individual (Manual) Risk Score
    —Manually change the risk score for individual SaaS applications without changing the underlying calculation method.
  • Global (Custom) Risk Score
    —Adjust the weights for the underlying attributes and allow SaaS Security Inline to recalculate and apply the risk score automatically and uniformly across all SaaS applications.
To identify whether you’ve changed a SaaS application’s risk score from its default assigned by SaaS Security Inline, simply move your cursor over the risk score to display
Default
,
Manual
, or
Custom
.

Change Individual Risk Score

SaaS Security Inline enables you to change the default risk score for any SaaS application. Although the risk score represents attributes that reflect the security posture of a given SaaS application, your organization might view a specific SaaS application as having an overall higher or lower security vulnerability due to supplemental information discovered in the course of your assessment. If you later reevaluate the SaaS application’s security posture, you can reset to the default risk score or revise as necessary.
  1. Select
    Visibility
    Discovered Applications
    .
  2. Select the SaaS application with the risk score you want to change.
  3. Click the score meter icon to display the risk score scale, then select a new score (
    1-10
    ).
    To restore a SaaS application to its default risk score, click
    Restore to Default
    .

Change Global Risk Score

By default, SaaS Security Inline assigns unequal weights to the attributes that underlie each SaaS application’s risk score. Key attributes have a higher impact on a SaaS application’s risk score: the risk score is derived by applying different weights to each attribute and calculating the risk score based on whether the SaaS application meets those compliance and security standards.
Although the default weights that SaaS Security Inline assigns reflect a concerted effort to balance risks, organizations perceive risk differently. For this reason, SaaS Security Inline enables you to assign your own, weight (formula) to each attribute to reflect the attributes that are more important to your organization. SaaS Security Inline recalculates the risk score for all SaaS applications based on the new weights, then displays the updated risk score for each SaaS application and updated dashboard metrics. This process can take up to two minutes to complete. For example, if your organization is a healthcare provider, you might want to assign the HIPPA attribute a heavier weightage.
  1. Select
    Visibility
    Discovered Applications
    .
  2. Click
    Configure Global Risk Scoring
    .
  3. Assign a weight (
    0-100
    ) to each
    Compliance
    attribute for a combined total of
    100
    .
  4. Assign a weight (
    0-100
    ) to each
    Security and Privacy
    attribute for a combined total of
    100
    .
  5. Toggle
    Use Custom Setting
    , then
    Save
    To restore the attributes to their default weights and reset all SaaS applications to their default risks scores accordingly, set the toggle to the off position, then
    Save
    .

Recommended For You