Skip to content

Commit f055fcf

Browse files
Merge pull request #224659 from ElazarK/governance
freshness and small fixes
2 parents c142590 + d4a10cb commit f055fcf

File tree

1 file changed

+9
-10
lines changed

1 file changed

+9
-10
lines changed

articles/defender-for-cloud/governance-rules.md

Lines changed: 9 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -2,12 +2,11 @@
22
title: Driving your organization to remediate security issues with recommendation governance in Microsoft Defender for Cloud
33
description: Learn how to assign owners and due dates to security recommendations and create rules to automatically assign owners and due dates
44
services: defender-for-cloud
5-
author: bmansheim
6-
ms.author: benmansheim
75
ms.service: defender-for-cloud
86
ms.topic: how-to
9-
ms.date: 11/13/2022
7+
ms.date: 01/23/2023
108
---
9+
1110
# Drive your organization to remediate security recommendations with governance
1211

1312
Security teams are responsible for improving the security posture of their organizations but they may not have the resources or authority to actually implement security recommendations. [Assigning owners with due dates](#manually-assigning-owners-and-due-dates-for-recommendation-remediation) and [defining governance rules](#building-an-automated-process-for-improving-security-with-governance-rules) creates accountability and transparency so you can drive the process of improving the security posture in your organization.
@@ -40,9 +39,9 @@ You can then review the progress of the tasks by subscription, recommendation, o
4039
4140
### Defining governance rules to automatically set the owner and due date of recommendations
4241

43-
Governance rules can identify resources that require remediation according to specific recommendations or severities, and the rule assigns an owner and due date to make sure the recommendations are handled. Many governance rules can apply to the same recommendations, so the rule with lower priority value is the one that assigns the owner and due date.
42+
Governance rules can identify resources that require remediation according to specific recommendations or severities. The rule assigns an owner and due date to ensure the recommendations are handled. Many governance rules can apply to the same recommendations, so the rule with lower priority value is the one that assigns the owner and due date.
4443

45-
The due date set for the recommendation to be remediated is based on a timeframe of 7, 14, 30, or 90 days from when the recommendation is found by the rule. For example, if the rule identifies the resource on March 1st and the remediation timeframe is 14 days, March 15th is the due date. You can apply a grace period so that the resources that are given a due date don't impact your secure score until they're overdue.
44+
The due date set for the recommendation to be remediated is based on a timeframe of 7, 14, 30, or 90 days from when the recommendation is found by the rule. For example, if the rule identifies the resource on March 1 and the remediation timeframe is 14 days, March 15 is the due date. You can apply a grace period so that the resources that 's given a due date don't affect your secure score until they're overdue.
4645

4746
You can also set the owner of the resources that are affected by the specified recommendations. In organizations that use resource tags to associate resources with an owner, you can specify the tag key and the governance rule reads the name of the resource owner from the tag.
4847

@@ -72,7 +71,7 @@ To define a governance rule that assigns an owner and due date:
7271
- **By resource tag** - Enter the resource tag on your resources that defines the resource owner.
7372
- **By email address** - Enter the email address of the owner to assign to the recommendations.
7473
1. Set the **remediation timeframe**, which is the time between when the resources are identified to require remediation and the time that the remediation is due.
75-
1. If you don't want the resources to impact your secure score until they're overdue, select **Apply grace period**.
74+
1. If you don't want the resources to affect your secure score until they're overdue, select **Apply grace period**.
7675
1. If you don't want either the owner or the owner's manager to receive weekly emails, clear the notification options.
7776
1. Select **Create**.
7877

@@ -90,13 +89,13 @@ If there are existing recommendations that match the definition of the governanc
9089
> - Create and apply rules on multiple scopes at once using management scopes cross cloud.
9190
> - Check effective rules on selected scope using the scope filter.
9291
93-
To view the effect rules on specific scope, use the “scope” filter and select a desired scope.
92+
To view the effect of rules on a specific scope, use the Scope filter to select a specific scope.
9493

95-
Conflicting rules are applied in priority order. For example, rules on a management scope, (Azure management groups, AWS master accents and GCP organizations) take effect before rules on scopes (for example, Azure subscriptions, AWS accounts, or GCP projects).
94+
Conflicting rules are applied in priority order. For example, rules on a management scope (Azure management groups, AWS accounts and GCP organizations), take effect before rules on scopes (for example, Azure subscriptions, AWS accounts, or GCP projects).
9695

9796
## Manually assigning owners and due dates for recommendation remediation
9897

99-
For every resource affected by a recommendation, you can assign an owner and a due date so that you know who needs to implement the security changes to improve your security posture and when they're expected to do it by. You can also apply a grace period so that the resources that are given a due date don't impact your secure score unless they become overdue.
98+
For every resource affected by a recommendation, you can assign an owner and a due date so that you know who needs to implement the security changes to improve your security posture and when they're expected to do it by. You can also apply a grace period so that the resources that 's given a due date don't affect your secure score unless they become overdue.
10099

101100
To manually assign owners and due dates to recommendations:
102101

@@ -112,7 +111,7 @@ To manually assign owners and due dates to recommendations:
112111
1. For any resource that doesn't have an owner or due date, select the resources and select **Assign owner**.
113112
1. Enter the email address of the owner that needs to make the changes that remediate the recommendation for those resources.
114113
1. Select the date by which to remediate the recommendation for the resources.
115-
1. You can select **Apply grace period** to keep the resource from impacting the secure score until it's overdue.
114+
1. You can select **Apply grace period** to keep the resource from affecting the secure score until it's overdue.
116115
1. Select **Save**.
117116

118117
The recommendation is now shown as assigned and on time.

0 commit comments

Comments
 (0)