Yes, the announcement was posted in Office 365 on Wednesday as was the techcommunity article.
Feedback is put in for each action that is broke or not matching each Thursday when we go through the Secure Score.
Data Loss Prevention (DLP) Policies:
[2018-09-27] Action Learn more still goes to Exchange Online admin instead of Security & Compliance Data loss prevention
[2018-09-27] Action still reports zero DLP polices enabled. We have two DLP policies enabled.
Azure AD administration:
[2018-09-27] “Review signs-ins after multiple failures report weekly” not in Secure Score Actions.
[2019-09-27] “Review role changes weekly” not in Secure Score actions.
[2018-09-27] “Review non-global administrators weekly” not in Secure Score actions.
Identity:
- Summary Identity Actions: 7 of 27.
- Summary Identity Score: 121/230.
- Visible Identity Actions complete: 7 of 15.
- Visible Identity Actions Score: 122/224
Data:
- Summary Data Actions: 5 of 31
- Summary Data Score: 27/214
- Visible Data Actions complete: 5 of 28
- Visible Data Actions Score: 27/211
Device
- Summary Device Actions: 6 of 34
- Summary Device Score: 70/246
- Visible Device Actions complete: 6 of 33
- Visible Device Score: 70/244
Apps
- Summary Apps Actions: 1 of 9
- Summary Apps Score: 20/140
- Visible Apps Actions complete: 1 of 9
- Visible Apps Score: 20/140
Our score comes out in Compare as 238 (us) to 58 (Seat Size Avg) to 83 (Industry Type Avg) to 31 (Microsoft Avg).
There is a high flux in score and scoring as well as an ongoing vagary in the Microsoft Secure Score development.
It would be helpful to have well outlined plans and developments communicated before the date of their release.