Skip to main content

​
Before You Begin

Ensure that the policy is assigned to all endpoints that are expected to comply with it. For consistent coverage and easier administration, it is strongly recommended to assign policies to Endpoint Groups. Policies assigned to a group are automatically inherited by all endpoints that belong to that group, including newly added endpoints.

​
Option 1: Review Compliance from the Dashboards Page

  1. Open the Dashboard page.
  2. In the Risk Factors Summary widget, select the Policies tab.
  3. Review the following information for the policy:
    • Policy Health Score
    • Number of Non-Compliant Endpoints
    • Number of Active Risk Factors
  4. Click the Endpoints count to view the endpoints currently affected by the policy.
  5. Review the affected endpoints and identify the risk factors contributing to non-compliance.
  6. Remediate the corresponding risk factors on each endpoint.
  7. Once updated probe results are received from the endpoints, policy compliance and health scores are automatically recalculated.

​
Option 2: Review Compliance from the Policies Page

  1. Open the Policies page.
  2. Select the policy you want to review.
  3. Examine the control health information to identify the controls with the lowest health scores.
  4. Click a control card to view the active risk factors associated with that control.
  5. For each risk factor, review the number of endpoints where the risk factor is currently active.
  6. Click the endpoint count for a risk factor.
  7. The Endpoints page opens with filters applied, displaying only the affected endpoints.
  8. Remediate the risk factor across the listed endpoints.
  9. To view detailed remediation guidance, open the Risk factor details page.
  10. After the endpoints report updated probe results, policy health, control health, and compliance status are automatically updated.

​
Key Considerations

  • Controls with low health scores often indicate the areas having the greatest impact on overall policy compliance.
  • A single risk factor may affect multiple endpoints and multiple controls.
  • Policies assigned through Endpoint Groups are inherited automatically and cannot be removed from individual endpoints unless the endpoint is removed from the group.
  • Compliance improvements become visible after updated probe results are received from the affected endpoints.

How to investigate risk factors

Investigate risk factors affecting an endpoint, review available technical details, and understand the underlying conditions or activities that caused a risk to be detected.

How to assess SOC 2 compliance readiness

Use the SOC 2 Compliance Policy to assess automatable SOC 2 controls, identify non-compliant endpoints, and remediate detected risks to improve overall compliance readiness.