You can now create policies to monitor specific settings for specific application instances. This capability helps you to concentrate your attention on the applications and settings that are most critical to your organization. SSPM displays the status of all policies on a new Security Configurations page (SSPMSecurity Configurations). On the Security Configurations page, you can also view the status of SSPM's predefined rules. While SSPM's predefined rules monitor the status of similar settings across all SaaS applications, administrator-defined policies focus on the applications and settings that are most important to you.

For example, for the subset of applications that are most critical to your organization, enforcing multi-factor authentication (MFA) and limiting session length might be of primary importance to you. In this case, you could create a policy that monitors only these critical applications and only the settings related to MFA and session duration. If SSPM detects a new violation in these settings, SSPM updates the policy status on the Security Configurations page. In this way, SSPM helps you track the status of your most critical applications to maintain a healthy security posture.