SOLVED

Secure Score not Scoring....

%3CLINGO-SUB%20id%3D%22lingo-sub-180079%22%20slang%3D%22en-US%22%3ESecure%20Score%20not%20Scoring....%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-180079%22%20slang%3D%22en-US%22%3E%3CP%3EI%20struggle%20with%20this%20thing.%20Idea%20seems%20great%20in%20principle%20but%20I%20cannot%20see%20how%20secure%20score%20understands%20anything%20going%20on%20in%20a%20tenancy.%20We%20have%26nbsp%3Benabled%20MFA%20conditional%20access%20for%20our%20GA's%20a%20year%20ago.%20Secure%20score%20says%20we%20haven't%20%3F%20%26nbsp%3BSecure%20score%20says%20we%20need%20to%20enable%20audit%20data%20recording.%20We%20have%20and%20often%20use%20the%20auditing%20capability%20in%20Security%20%26amp%3B%20Compliance%20so%20why%20isn't%20Secure%20Score%20picking%20this%20telemetry%20up%3F%20Our%20score%20should%20be%20almost%20100%20points%20higher%20than%20it%20is%20if%20it%20were%20accuratley%20getting%20data.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-180259%22%20slang%3D%22en-US%22%3ERe%3A%20Secure%20Score%20not%20Scoring....%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-180259%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Kevin%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ESorry%20for%20the%20confusion%20and%20issues%20you%20are%20having.%26nbsp%3B%20Let%20me%20explain%20why%20you%20are%20not%20getting%20the%20points%20you%20expect.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EFor%20MFA%2C%20we%20don't%20have%20the%20telemetry%20for%20conditional%20access%20wired%20in%20so%20this%20is%20why%20you%20are%20not%20getting%20the%20points.%26nbsp%3B%20If%20you%20enabled%20MFA%20without%20conditional%20access%20you%20would%20get%20the%20points.%26nbsp%3B%20We%20have%20seen%20other%20organizations%20with%20the%20same%20issue%20and%20this%20is%20on%20our%20list%20of%20items%20to%20work%20on%20in%20the%20future.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EFor%20enable%20audit%20data%20recording%2C%20this%20control%20should%20have%20the%20text%20%22%5BNot%20Scored%5D%22%20in%20front%20of%20it.%26nbsp%3B%20This%20means%20we%20don't%20have%20the%20telemetry%20wired%20up%20for%20it%20and%20we%20are%20not%20providing%20the%26nbsp%3Bpoints.%26nbsp%3B%20Note%20that%20these%20points%20are%20not%20part%20of%20your%20denominator%20though.%26nbsp%3B%20If%20you%20have%20enabled%20this%2C%20then%20you%20will%20automatically%20get%20the%20points%20when%20we%20wire%20the%20telemetry%20in.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

I struggle with this thing. Idea seems great in principle but I cannot see how secure score understands anything going on in a tenancy. We have enabled MFA conditional access for our GA's a year ago. Secure score says we haven't ?  Secure score says we need to enable audit data recording. We have and often use the auditing capability in Security & Compliance so why isn't Secure Score picking this telemetry up? Our score should be almost 100 points higher than it is if it were accuratley getting data.

1 Reply
best response confirmed by Kevin Spreadbury (Occasional Contributor)
Solution

Hi Kevin,

 

Sorry for the confusion and issues you are having.  Let me explain why you are not getting the points you expect. 

 

For MFA, we don't have the telemetry for conditional access wired in so this is why you are not getting the points.  If you enabled MFA without conditional access you would get the points.  We have seen other organizations with the same issue and this is on our list of items to work on in the future.

 

For enable audit data recording, this control should have the text "[Not Scored]" in front of it.  This means we don't have the telemetry wired up for it and we are not providing the points.  Note that these points are not part of your denominator though.  If you have enabled this, then you will automatically get the points when we wire the telemetry in.