User Profile
KeizerJ
Copper Contributor
Joined 6 years ago
User Widgets
Recent Discussions
Secure Score not scoring properly
We seem to be having some issues with our Secure Score lately. The score goes up and down and shows controls as not configured while they have been for a long time. Example #1; The "Turn on audit data recording" control setting is worth 15 points. We enabled it months ago. We scored points for it the entire time, since last Tuesday..Now its in the "Not completed" filter list again and we dropped in points. It shows up as "feature in place: false" scoring 0/15. If we follow the "Review" button, its all working fine and gathering data throughout the entire period. Example #2; The counts for MFA are not correct. We understand the difference between "required" and "registered" for MFA but still the numbers are incorrect. The "Require MFA for all users" control shows "You have 53 of 83 user accounts that don't use MFA..". The "Register all users for multi-factor authentication" control shows "You have 48 out of 83 users who don't have MFA registered.". First off we can't match the 83 count of users..My Azure exports show 97 users..What filters apply to obtain that number of users? If we subtract shared-mailboxes it still doesn't add up. If we remove guest-users its way to high. Secondly, we have a policy in place that requires MFA for all guest users. Given the number of our own users that we require MFA for plus that guest policy, the number of not listed as required MFA users should be way lower (around 30 at this stage). We also have some features that are not scored properly that are most likely related to our Hybrid Exchange config, we don't really care about those but I think you should be able to detect the Hybrid config and apply filters for it. EDIT: Another example is the "Do not allow users to grant consent to unmanaged applications" control. We had this setting set to Enabled, so it always was allowed. We changed it to Not enabled so it would be more secure. As a reward we lost 10 points... Could anyone provide insights in the above deviations?
