Diagrama de temas
-
General
Microsoft Secure Score is a security analytics tool. Its goal is twofold:
- Help organizations see what they did to reduce the risk to their data.
- Show organizations what they can do to further reduce that risk.
Secure Score determines what Microsoft 365 services an organization is using. It then looks at its configuration and behaviors and compares it to a baseline that Microsoft configured. Rather than reacting or responding to security alerts, the Secure Score tool enables organizations to track and plan incremental improvements over a longer period of time.
This module introduces you to the Microsoft Secure Score tool, its benefits, and the kind of services it can analyze. You also learn how to use the Secure Score tool to identify gaps between your current state and where you would like to be regarding security. The tool then identifies actions that can increase your security by mitigating risks. Finally, you learn where to look to determine the threats each action mitigates and the effect it has on users.
-
Module 1: Introduction to Microsoft Secure Score
-
Explore Microsoft Secure Score
Microsoft Secure Score is a measurement of an organization's security posture. The more improvement actions taken, the higher the score. Organizations that implement the Security Score recommendations can protect themselves from threats. From a centralized dashboard in the Microsoft 365 Security Center, organizations can monitor and work on the security of their Microsoft 365 identities, data, apps, devices, and infrastructure.
Microsoft Secure Score helps organizations:
- Report on the current state of their security posture.
- Improve their security posture by providing discoverability, visibility, guidance, and control.
- Compare with benchmarks and establish key performance indicators (KPIs).
By implementing Microsoft Secure Score, organizations gain access to features such as:
- Robust visualizations of metrics and trends
- Integration with other Microsoft products
- Score comparison with similar organizations
The score can also reflect when third-party solutions address recommended actions.
-
Module 2: Navigating the Secure Score Dashboard
-
Assess your security posture with Microsoft Secure Score
Microsoft Secure Score is a measurement of an organization's security posture, with a higher number indicating more recommended actions taken. To help you find the information you need more quickly, the Secure Score dashboard organizes Microsoft recommended actions into the following groups:
- Identity (Microsoft Entra accounts and roles)
- Device (Microsoft Defender for Endpoint, known as Microsoft Secure Score for Devices)
- Apps (email and cloud apps, including Office 365 and Microsoft Defender for Cloud Apps)
- Data (through Microsoft Purview Information Protection)
In the Microsoft Secure Score Overview tab, view how the system splits points between these groups and what points are available. An organization can also get:
- An all-up view of the total score
- Historical trend of the organization's secure score with benchmark comparisons
- Prioritized recommended actions the organization can take to improve its score.
Check your current score
To check on your current score, go to the Microsoft Secure Score Overview tab and look for the tile that says Your secure score. The tile shows your score as a percentage, along with the number of points you achieved out of the total possible points.
Additionally, if you select the Include button next to your score, you can choose different views of your score. These different views display in the graph on the score tile and the point breakdown chart.
The following are scores you can add to your view of your overall score to give you a fuller picture of your overall score:
- Planned score. Shows your projected score if you complete the planned actions.
- Current license score. Shows the score you can achieve with your current Microsoft license.
- Achievable score. Shows the score you can achieve with your Microsoft licenses and current risk acceptance.
This view shows how the Your secure score tile appears if you include all possible score views.
-
-
Module 3: Identifying Key Areas for Improvement
-
Track your Microsoft Secure Score history and meet your goals
Microsoft Secure Score is a measurement of an organization's security posture, with a higher number indicating more recommended actions taken.
Organizations can view a graph of their score over time in the History tab. Below the graph is a list of all the actions taken in the selected time range and their attributes, such as resulting points and category. You can customize a date range and filter by category.
If you select the recommended action associated with an activity, the full recommended action flyout appears. To view all history for that specific recommended action, select the History link in the flyout.
Discover trends and set goals
The Metrics and trends tab displays several graphs and charts to give organizations more visibility into trends and set goals. You can set the date range for the whole page of visualizations. The visualizations include:
- Your Secure Score zone. Customized based on your organization's goals and definitions of good, okay, and bad score ranges.
- Regression trend. A timeline of points that regressed because of configuration, user, or device changes.
- Comparison trend. How your organization's Secure Score compares to others' over time. This view can include lines representing the score average of organizations with similar seat count and a custom comparison view that you can set.
- Risk acceptance trend. Timeline of recommended actions marked as "risk accepted."
- Score changes. The number of points achieved, points regressed, and changes to your score in the specified date range.
Compare your score to organizations like yours
There are two places to see how your score compares to organizations that are similar to yours - in the Comparison bar chart and in the Comparison trend line graph.
Comparison bar chart
The comparison bar chart is available on the Overview tab. Hover over the chart to view the score and score opportunity.
Note
The comparison data is anonymous, so Microsoft doesn't know exactly whose tenants are in the mix.
Comparison trend
In the Metrics and trends tab, view how your organization's Secure Score compares to others' over time.
-
-
Module 4: How Can Sterling Help You!