Changes to Cloud App Catalog and Risk score calculation

Microsoft Defender for Cloud Apps is implementing changes to the Cloud App Catalog to improve the scoring of apps. The changes involve the removal of non-relevant/redundant indicators such as Consumer Popularity Index, Safe Harbor, Jericho Forum Commandments, Heartbleed patches, and protection against DROWN. Some indicators, like Founded Holding Domain Registration and FedRAMP level FISMA, will also be removed from the score calculation but will continue to be available in Filters and presented in the catalog for information purposes. The Disaster Recovery Plan indicator will be moved from the General section to the Security section, while the SSAE 16 indicator will be replaced by SSAE 18.

These changes will be implemented in mid-Dec 2022 and might affect the risk score of some applications and trigger new alerts. Existing discovery policies created based on the total score of apps or the removed indicators might also be affected. Organizations are advised to review their existing discovery policies, modify or create new policies as needed to prepare for these changes.

Message ID: MC467232

The post Changes to Cloud App Catalog and Risk score calculation appeared first on M365 Admin.