Update posture-overview.md

Itai - improved the overview page to reflect Secure Score as well.

Author: Itaicitaic1

CloudAppSecurityDocs/posture-overview.md

@@ -1,31 +1,20 @@
 ---
-title: SaaS security posture management(SSPM) - overview 
-description: Learn what is SaaS security posture management(SSPM) in Microsoft Defender for cloud apps
+title: SaaS security posture management (SSPM) - overview 
+description: Learn what is SaaS security posture management (SSPM) in Microsoft Defender for cloud apps
 ms.topic: how-to
 ms.date: 10/31/2024
 ---
 
 # SaaS security posture management (SSPM) - overview 
 
-One of Microsoft Defender for Cloud Apps’ core pillars is SaaS Security Posture Management (SSPM), which offers detailed visibility into the security state of your SaaS applications and provides actionable guidance to help you strengthen your security posture efficiently. Your SaaS application environments may be configured in a risky posture, and Defender for Cloud Apps provides risk-based security configuration assessments to help you identify and mitigate potential risks. These recommendations are shown via [Microsoft Security Exposure Management](https://learn.microsoft.com/security-exposure-management/microsoft-security-exposure-management) in the SaaS security initiative once you have a connector to an application. For example:
-
-
-![Screenshot of the SaaS security initiative.](<media/posture-overview/screenshot-of-the-saas-security-initiative-home-page.png>)
-
-## How to manage your organization SaaS security posture
-To effectively manage your organization’s SaaS security posture, we recommend beginning with the SaaS Security initiative in Microsoft Defender XDR. This initiative consolidates best practices and measurable metrics specifically for securing SaaS applications, allowing you to prioritize and address the most impactful recommendations for SaaS environments. For more information, see:
-
-- [SaaS Security Initiative](https://learn.microsoft.com/defender-cloud-apps/saas-security-initiative)
+    > [!NOTE]
+    > Microsoft Security Exposure Management data and capabilities are currently unavailable in U.S Government clouds - GCC, GCC High and DoD. For these environments, it is recommended to consume SaaS security posture recommendations via [Microsoft Secure Score](/microsoft-365/security/defender-endpoint/tvm-security-recommendation)
 
-In addition you can find a variety of SSPM recommendations under different initiatives. Key initiatives include:
+One of Microsoft Defender for Cloud Apps’ core pillars is SaaS Security Posture Management (SSPM), which offers detailed visibility into the security state of your SaaS applications and provides actionable guidance to help you strengthen your security posture efficiently. Your SaaS application environments may be configured in a risky posture, and Defender for Cloud Apps provides risk-based security configuration assessments to help you identify and mitigate potential risks. These recommendations are shown via [Microsoft Security Exposure Management](https://learn.microsoft.com/security-exposure-management/microsoft-security-exposure-management) once you have a connector to an application. For example:
 
-- SaaS Security
-- CIS Microsoft 365 Foundations Benchmark
-- Ransomware Protection
-- Identity Security
-- Business Email Compromise - Financial fraud
-- Zero Trust (Foundational)
+![Screenshot of the SalesForce recommendations in Secure Score.](media/security-saas-sspm-in-secure-score-salesforce-filter.png)
 
+![Screenshot of the SaaS security initiative.](<media/posture-overview/screenshot-of-the-saas-security-initiative-home-page.png>)
 
 ## Prerequisites
 
@@ -34,19 +23,19 @@ In addition you can find a variety of SSPM recommendations under different initi
 
     - [Connect apps to get visibility and control with Microsoft Defender for Cloud Apps](enable-instant-visibility-protection-and-governance-actions-for-your-apps.md)
     - [Learn which of the apps connectors provides security recommendations ](enable-instant-visibility-protection-and-governance-actions-for-your-apps.md#user-app-governance-and-security-configuration-visibility)
+ 
+## Turn on SaaS security recommendations
 
-## Turn on SSPM recommendations
-
-This procedure describes how to ensure that your connector is set to show data in Microsoft Security Exposure Management for SaaS app security posture management.
+This procedure describes how to ensure that your application connector is set to show data in Microsoft Security Exposure Management.
 
 1. In Microsoft Defender XDR, select **Settings** > **Cloud Apps** > **Connected apps** > **App Connectors**.
 
-1. Use the filter to locate the app where you want to turn on SSPM recommendations.
+1. Use the filter to locate the application where you want to turn on security recommendations.
 
-1. Open the instance drawer and note whether 'Secure score' or 'Exposure management' recommendations are turned on or off. For example, the following screenshot shows that 'Secure score' or 'Exposure management' recommendations are turned on for **Okta Contoso EU** instance:
+1. Open the instance drawer and note whether 'Security recommendations' are turned on or off. For example, the following screenshot shows that 'Security recommendations' are turned on for **Okta Contoso EU** instance:
 ![Screenshot of an instance where Secure Score recommendations are turned on.](<media/posture-overview/screenshot-of-an-instance-where-secure-score-recommendations-are-turned-on.png>)
 
-    If the instance is currently set to **Off**, select the **...** options menu and then select **Turn on 'Secure Score' or 'Exposure management' recommendations**. For example:
+    If the instance is currently set to **Off**, select the **...** options menu and then select **Turn on 'Security recommendations'**. For example:
 ![Screenshot of the Turn on Secure Score or 'Exposure management' recommendations option.](<media/posture-overview/screenshot-of-the-turn-on-secure-score-or-exposure-management-recommendations-option.png>)
 
     > [!NOTE]
@@ -55,9 +44,32 @@ Security recommendations for the selected instance are added to Microsoft Securi
 
 Security recommendations are shown automatically in [Microsoft Security Exposure Management](/microsoft-365/security/defender/microsoft-secure-score). Recommendations are based on Microsoft benchmarks, and may take up to 24 hours to update.
 
-In SaaS security initiative, in the **Security recommendations** filter by product to view any recommended actions. If you have multiple instances of an app, you can select to filter recommendations from specific instances only. For example:
-![Screenshot of a SaaS initiative filter showing multiple instances of an app.](<media\posture-overview\screenshot-of-a-saas-initiative-filter-showing-multiple-instances-of-an-app.png>)
+In Microsoft Secure Score, filter the **Recommended actions** tab by product to view any recommended actions. If you have multiple instances of an app, you can select to filter recommendations from specific instances only. For example:
+
+:::image type="content" source="media/secure-score-filter.png" alt-text="Screenshot of a Secure Score filter showing multiple instances of an app.":::
 
+Select a recommendation and then select the **Implementation** tab in the details pane for a step-by-step remediation guide.
+
+For more information, see [Assess your security posture with Microsoft Secure Score](/microsoft-365/security/defender/microsoft-secure-score-improvement-actions).
+
+
+## How to manage your organization SaaS security posture
+
+> [!IMPORTANT]
+> Since Microsoft Security Exposure Management data and capabilities are currently unavailable in U.S Government clouds - GCC, GCC High and DoD, it is recommended for these environments to consume SaaS security posture recommendations via [Microsoft Secure Score](/microsoft-365/security/defender-endpoint/tvm-security-recommendation) as explained above
+
+To effectively manage your organization’s SaaS security posture, we recommend beginning with the SaaS Security initiative. This initiative consolidates best practices and measurable metrics specifically for securing SaaS applications, allowing you to prioritize and address the most impactful recommendations for SaaS environments. For more information, see:
+
+- [SaaS Security Initiative](https://learn.microsoft.com/defender-cloud-apps/saas-security-initiative)
+
+In addition you can find a variety of SSPM recommendations under different initiatives. Key initiatives include:
+
+- SaaS Security
+- CIS Microsoft 365 Foundations Benchmark
+- Ransomware Protection
+- Identity Security
+- Business Email Compromise - Financial fraud
+- Zero Trust (Foundational)
 
 
 ## Next steps