You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: ATPDocs/identity-security-initiative.md
+29-26Lines changed: 29 additions & 26 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -16,40 +16,17 @@ Identity security is the practice of protecting the digital identities of indivi
16
16
- Your organization must have a Microsoft Defender for Identity license.
17
17
-[Review prerequisites and permissions needed](/security-exposure-management/prerequisites) for working with Security Exposure Management.
18
18
19
-
## View Identity security recommendations
20
-
21
-
The Security recommendations tab displays a list of prioritized remediation actions related to your identity security posture. Each recommendation is evaluated for compliance and mapped to its corresponding risk impact, workload, and domain. This view helps you triage and take action based on urgency and business relevance.
22
-
23
-
:::image type="content" source="media/identity-security-initiative/screenshot-showing-the-security-recommendations-page.png" alt-text="Showing showing the security recommendations page":::
24
-
19
+
## View Identity Security Initiatives
25
20
1. Navigate to [Microsoft Defender portal](https://security.microsoft.com/)
26
21
1. From the Exposure management section on the navigation bar, select Exposure insights **>** Initiatives to open the Identity Security page.
27
-
1. Sort the recommendations by any of the headings or filter them based on your task needs. Sorting includes all of the headers:
|**Name**| The name of the recommended action (for example, *Configure VPN integration*, *Enable MFA*). |
33
-
|**State**| Indicates whether the recommendation is *Compliant* or *Not Compliant*. |
34
-
|**Impact**| The security impact level (Low, Medium, or High) of implementing the recommendation. |
35
-
|**Workload**| The Microsoft service area the recommendation applies to (for example, Defender for Identity, Microsoft Entra ID). |
36
-
|**Domain**| The security domain (for example, identity, apps) associated with the recommendation. |
37
-
|**Last calculated**| The most recent time the recommendation's status was evaluated. |
38
-
|**Last state change**| When the recommendation’s compliance state last changed. |
39
-
|**Related initiatives**| Number of security initiatives impacted by this recommendation. |
40
-
|**Related metrics**| Number of security metrics that this recommendation contributes to. |
41
-
42
-
Security Exposure Management categorizes recommendations by compliance status, as follows:
43
-
44
-
-**Compliant**: Indicates that the recommendation was implemented successfully.
45
-
-**Not complaint**: Indicates that the recommendation wasn't fixed.
46
22
47
23
## Review security metrics
48
24
49
25
Metrics in security initiatives help you to measure exposure risk for different areas within the initiative. Each metric gathers together one or more recommendations for similar assets.
50
26
Metrics can be associated with one or more initiatives.
51
27
52
28
On the Metrics tab of an initiative, or in the Metrics section of Exposure Insights, you can see the metric state, its effect, and relative importance in an initiative, and recommendations to improve the metric.
29
+
We recommend that you prioritize metrics with the highest impact on Initiative Score level. This composite measure considers both the weight value of each recommendation and the percentage of non-compliant recommendations.
53
30
54
31
:::image type="content" source="media/identity-security-initiative/screenshot-of-the-security-metrics-page.png" alt-text="Screenshot showing the security metrics page":::
55
32
@@ -59,13 +36,39 @@ On the Metrics tab of an initiative, or in the Metrics section of Exposure Insig
59
36
|**Metric name**| The name of the metric. |
60
37
|**Progress**|Shows the improvement of the exposure level for the metric from 0 (high exposure) to 100 (no exposure). |
61
38
|**State**| Shows if the metric needs attention or if the target was met. |
62
-
|**Affected assets**| The number of affected assets within the metric. |
63
39
|**Total assets**| Total number of assets under the metric scope. |
64
40
|**Recommendations**| Security recommendations associated with the metric. |
65
41
|**Weight**| The relative weight (importance) of the metric within the initiative, and its effect on the initiative score. Shown as High, Medium, and Low. It can also be defined as Risk accepted. |
66
42
|**14-day trend**| Shows the metric value changes over the last 14 days. |
67
43
|**Last updated** | Shows a timestamp of when the metric was last updated.
68
44
45
+
> [!NOTE]
46
+
> The Affected assets experience is not fully supported during the Preview phase.
47
+
48
+
## View Identity security recommendations
49
+
50
+
The Security recommendations tab displays a list of prioritized remediation actions related to your identity security posture. Each recommendation is evaluated for compliance and mapped to its corresponding risk impact, workload, and domain. This view helps you triage and take action based on urgency and business relevance.
51
+
52
+
:::image type="content" source="media/identity-security-initiative/screenshot-showing-the-security-recommendations-page.png" alt-text="Showing showing the security recommendations page":::
53
+
54
+
Sort the recommendations by any of the headings or filter them based on your task needs.
0 commit comments