---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/pt-BR/security-management

 Release :

    - australia

ft:locale :

    - pt-BR

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Included policies

# Policies included with the Security Posture Control application {#ariaid-title1}

* Versão de lançamento: Australia
* 
* Atualizado 12 de mar. de 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 min. de leitura

There are a few policies that are included with the Security Posture Control application that are tied to important use cases and are ultimately shown as key insights on the dashboard on the landing page (Home module) in the SPC Workspace.

## Viewing policies {#spc-polices-included__section_hmh_tpl_dcc}

To view these policies, navigate to WorkspacesSecurity Posture ControlPolicies and findingsAll.

These policies are deactivated by default. You must activate them before you can view returned results (Findings). You cannot edit these policies, but you can use them to help you create other policies by cloning their conditions
as a starting point. See [Clone a policy or create a child policy in Security Posture Control](https://servicenow-prod.fluidtopics.net/tsCpX7UEexa3azu7cvhcaQ "Clone an existing policy and add conditions to it to create your own custom policy. You can also create child policies from existing policies.") for more information.

You can clone these policies to create your own custom policies but note that any policies you clone are not reflected as key insights on the dashboard on the Home landing page with the key insights
that are included with the application. However, you can configure findings for these cloned policies and see the returned results from these policies.

You can configure custom insights or reports for the cloned policies, or, alternatively configure findings for these cloned policies to manage remediation. You can also create your own custom policies from scratch to monitor
security controls coverage as per your internal requirements.  
The policies shipped with the application include the following categories:

* Policies that monitor security controls coverage (endpoint protection and vulnerability scanner).
* Policies that identify unmanaged devices.
* Policies that monitor toxic combinations that involve critical combinations such as missing security controls, internet exposure, and so on.
* Policies for SPC API Integrations for Mitigation Controls Monitoring.
{#spc-polices-included__ul_f5k_1l3_lcc}

After you clone and activate any policies you create, you must create your own custom insight record on the Custom insight builder module in the workspace (the last module in the navigator panel). Only then can you view the data
from your policies on the Custom insights dashboard (the second icon from the top in the workspace).

## Policies and asset profiles included with the application {#spc-polices-included__section_qbb_vkk_1gc}

Get insights into your overall security posture and configuration gaps in your security tools using the policies and asset profiles that are included with the application. Activate these asset profiles and policies in the Security Posture Control workspace so that you can identify gaps in configuration or coverage of the following tools:

* CrowdStrike
* Microsoft Intune, Defender, and SCCM
* HCL Big Fix
* Qualys
* Rapid7
{#spc-polices-included__ul_fww_wkk_1gc}

## Creating your own policies {#spc-polices-included__section_czn_qnz_dcc}

See [Creating your own policies in the Security Posture Control application](https://servicenow-prod.fluidtopics.net/mz2m86OoQ78TUFrotYlDCw "You can create your own custom policies to monitor data that is specific to the assets in your environment. You base these policies on data you will import from the various Service Graph Connectors you have installed and activated.") for more information about how to create your own policies.

For example policies, see [Examples of base, child, and cloned policies for Security Posture Control](https://servicenow-prod.fluidtopics.net/S0qNNPqWOSpsXXqVWk7ZuQ "You can create your own base policies that have broad sets of conditions that you can use as starting points for more complex policies.").

See [Create and activate custom policies for Security Posture Control](https://servicenow-prod.fluidtopics.net/EAOKjSiGlRV5b0qyJ__U2g "Create your own custom policies to monitor assets for tool coverage and other high-risk combinations.") for more information about the steps required to create a policy.

See [Mitigation controls policies](https://servicenow-prod.fluidtopics.net/kOmg0FNJIVwbs9g6rjxUkA "The Security Posture Control and the Mitigation Controls applications are required to view the mitigation controls and mitigation controls policies in the SPC. Both applications are available from the ServiceNow Store.") for more information for more information about policies used for mitigation controls monitoring.