Forum Discussion

Surya kumar's avatar
Surya kumar
Copper Contributor
Jun 06, 2018

Office365 secure score - Not scoring

Few actions are not getting scored like "Use audit data", "Review role changes weekly".
Matthew Morgan's avatar
Matthew Morgan
Copper Contributor

We also review reports weekly (using a Global Admin account) but are not seeing points assigned for doing this. Is it a requirement to have to review the reports using the 'Review' button in Secure Score? If so, that may be the reason why it is not being scored as we access the weekly reports using links in a recurring weekly appointment.

 

We also see the following not being correctly scored by Secure Score:

  • Not correctly identifying the number of Global Admins who’s accounts have been MFA enabled
  • Not correctly identifying the Customer Lockbox feature has been enabled
Anthony Smith (A.J.)'s avatar
Anthony Smith (A.J.)
Icon for Microsoft rankMicrosoft
Jun 07, 2018

Hi Matthew,

 

The requirement is that you click the review button versus going directly to the report.  The reason is that the reports don't have any telemetry.  The review button is the only way we know you have looked at the report.

 

For the other issues, I would recommend using the feedback button in the bottom right of Secure Score with that info as I see this working correctly and might be something specific to your tenant.

 

Thanks!

  • Matthew Morgan's avatar
    Matthew Morgan
    Copper Contributor
    Jun 07, 2018

    Hi Anthony,

     

    Thanks for your reply.

     

    Not sure if there are any future plans to use telemetry as it's so much easier to access the reports from a pre-defined set of links in one location (i.e. a recurring weekly appointment). Having to go to Secure Score to launch the review of the various reports takes quite some time to do.

     

    I'll go ahead and use the Feedback button for the other issues.

     

    Thanks again,

     

    Matt

    • Anthony Smith (A.J.)'s avatar
      Anthony Smith (A.J.)
      Icon for Microsoft rankMicrosoft
      Jun 07, 2018

      Hi Christopher and Surya,

       

      I looked at my tenant this morning and noticed that the reports I reviewed yesterday are being scored.  See screenshot below for my score comparison view.

       

      • Surya kumar's avatar
        Surya kumar
        Copper Contributor
        Jun 25, 2018

        Mine is still not scored.

  • Matthew Morgan's avatar
    Matthew Morgan
    Copper Contributor
    Jun 26, 2018

    Hi Anthony,

     

    For scoring for actions on Mobile Devices, it seems that this is only applicable if you use Mobile Device Management for Office 365? (not Microsoft Intune). As an example, one of the Actions is 'Require mobile devices to use a password', which we have configured but are not seeing points assigned for this. Would this be because it is only scoring for Mobile Device Management for Office 365? (not Microsoft Intune).

     

    Thanks,

     

    Matt

    • Anthony Smith (A.J.)'s avatar
      Anthony Smith (A.J.)
      Icon for Microsoft rankMicrosoft
      Jun 26, 2018

      Hi Matthew,

       

      Your assumption is correct.  We currently have the telemetry for only the Office 365 MDM solution.  The Intune telemetry steam has had some issues and is not wired up at the moment.  I hope to share more info on this in the next week or two.

      • Matthew Morgan's avatar
        Matthew Morgan
        Copper Contributor
        Jun 27, 2018

        Thanks very much for your reply Anthony. I appreciate you sharing that there may be more information on this in the near future.

Resources