: Change Risk Score for Discovered SaaS Apps
Focus
Focus

Change Risk Score for Discovered SaaS Apps

Table of Contents

Change Risk Score for Discovered SaaS Apps

Learn how to customize the risk score in SaaS Security Inline to match your organization’s independent risk assessment of the SaaS application’s vulnerabilities.
SaaS Security Inline provides risk scoring to help you assess the security posture and enterprise readiness of a given SaaS application. The risk score is between 1 (low risk) and 5 (high risk) and is based on compliance attributes. Some SaaS apps might temporarily have no risk score because the SaaS apps are pending risk assessment by SaaS Security Inline. You cannot change the risk score of Discovered SaaS applications for which the risk score is unknown.
When a given SaaS app in the App Dictionary is a known industry SaaS app but does not yet have a risk score due to pending risk assessment by SaaS Security Inline, the risk score indicates NA for score, Under Research in the legend, and Application Compliance is under research in Compliance.
There are two ways to change a risk score for SaaS applications:
  • Individual (Manual) Risk Score—Manually change the risk score for individual SaaS applications without changing the underlying calculation method.
  • Global (Custom) Risk Score—Adjust the weights for the underlying attributes and allow SaaS Security Inline to recalculate and apply the risk score automatically and uniformly across all SaaS applications.
To identify whether you’ve changed a SaaS application’s risk score from its default assigned by SaaS Security Inline, simply move your cursor over the risk score to display Default, Manual, or Custom.

Change Individual Risk Score

SaaS Security Inline enables you to change the default risk score for any SaaS application. Although the risk score represents attributes that reflect the security posture of a given SaaS application, your organization might view a specific SaaS application as having an overall higher or lower security vulnerability due to supplemental information discovered in the course of your assessment. If you later reevaluate the SaaS application’s security posture, you can reset to the default risk score or revise as necessary.
  1. Navigate to SaaS Security Inline.
  2. To navigate to the Discovered Applications view, select Applications.
  3. Select the SaaS application with the risk score you want to change.
  4. Select a new risk score. In the Actions column for the selected SaaS application, click the score meter icon to display the risk score scale. Select a new score (1-5).
    To restore a SaaS application to its default risk score, click Restore to Default.

Change Global Risk Score

By default, SaaS Security Inline assigns unequal weights to the attributes that underlie each SaaS application’s risk score. Key attributes have a higher impact on a SaaS application’s risk score: the risk score is derived by applying different weights to each attribute and calculating the risk score based on whether the SaaS application meets those compliance and security standards.
Although the default weights that SaaS Security Inline assigns reflect a concerted effort to balance risks, organizations perceive risk differently. For this reason, SaaS Security Inline enables you to assign your own, weight (formula) to each attribute to reflect the attributes that are more important to your organization. SaaS Security Inline recalculates the risk score for all SaaS applications based on the new weights, then displays the updated risk score for each SaaS application and updated dashboard metrics. This process can take up to two minutes to complete. For example, if your organization is a healthcare provider, you might want to assign the HIPPA attribute a heavier weightage.
  1. Navigate to SaaS Security Inline.
  2. To configure global risk scoring, select SettingsConfigureConfigure Global Risk Score.
  3. Assign a weight ( 0-100) to each Compliance attribute for a combined total of 100.
  4. Assign a weight ( 0-100) to each Security and Privacy attribute for a combined total of 100.
  5. Toggle Use Custom Weights, then Save
    To restore the attributes to their default weights and reset all SaaS applications to their default risks scores accordingly, set the toggle to the off position, then Save.