Policies included with the Security Posture Control application

  • Release version: Yokohama
  • Updated August 18, 2025
  • 2 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Policies included with the Security Posture Control application

    The Security Posture Control (SPC) application includes predefined policies designed to address key security use cases and provide critical insights on the SPC Workspace dashboard. These policies help you monitor security controls coverage, identify unmanaged devices, detect toxic security combinations, and support SPC API integrations for mitigation controls monitoring.

    Show full answer Show less

    By default, these policies are deactivated and read-only. You can activate them to view findings, but you cannot edit them directly. Instead, they serve as templates to create custom policies through cloning.

    Working with Included Policies

    • Viewing Policies: Access all included policies via Workspaces > Security Posture Control > Policies and findings > All.
    • Activation: Policies must be activated to generate findings and appear in reports.
    • Customization: You cannot edit built-in policies but can clone them to create new policies tailored to your environment.
    • Insights and Reporting: Cloned or custom policies do not automatically appear as key insights on the default dashboard. You must create custom insight records in the Custom Insight Builder module to visualize their data in the Custom Insights dashboard.

    Predefined Policy Categories

    • Security controls coverage monitoring, including endpoint protection and vulnerability scanners.
    • Detection of unmanaged devices on the network.
    • Identification of toxic combinations such as missing controls or internet exposure.
    • SPC API integrations for mitigation controls monitoring.

    Asset Profiles Included

    The application also provides asset profiles that, when activated, help identify configuration gaps across security tools such as CrowdStrike, Microsoft Intune, Defender, SCCM, HCL BigFix, Qualys, and Rapid7. Activating these profiles along with policies enables comprehensive security posture insights.

    Creating and Managing Custom Policies

    You can create custom policies from scratch or by cloning existing ones to meet your organization's specific monitoring needs. After creating and activating custom policies, set up custom insights to view and manage findings effectively. Detailed guidance and examples are available within the application documentation to assist with policy creation and activation.

    There are a few policies that are included with the Security Posture Control application that are tied to important use cases and are ultimately shown as key insights on the dashboard on the landing page (Home module) in the SPC Workspace.

    Viewing policies

    To view these policies, navigate to Workspaces > Security Posture Control > Policies and findings > All.

    These policies are deactivated by default. You must activate them before you can view returned results (Findings). You cannot edit these policies, but you can use them to help you create other policies by cloning their conditions as a starting point. See Clone a policy or create a child policy in Security Posture Control for more information.

    You can clone these policies to create your own custom policies but note that any policies you clone are not reflected as key insights on the dashboard on the Home landing page with the key insights that are included with the application. However, you can configure findings for these cloned policies and see the returned results from these policies.

    You can configure custom insights or reports for the cloned policies, or, alternatively configure findings for these cloned policies to manage remediation. You can also create your own custom policies from scratch to monitor security controls coverage as per your internal requirements.

    The policies shipped with the application include the following categories:
    • Policies that monitor security controls coverage (endpoint protection and vulnerability scanner).
    • Policies that identify unmanaged devices.
    • Policies that monitor toxic combinations that involve critical combinations such as missing security controls, internet exposure, and so on.
    • Policies for SPC API Integrations for Mitigation Controls Monitoring.

    After you clone and activate any policies you create, you must create your own custom insight record on the Custom insight builder module in the workspace (the last module in the navigator panel). Only then can you view the data from your policies on the Custom insights dashboard (the second icon from the top in the workspace).

    Policies and asset profiles included with the application

    Get insights into your overall security posture and configuration gaps in your security tools using the policies and asset profiles that are included with the application. Activate these asset profiles and policies in the Security Posture Control workspace so that you can identify gaps in configuration or coverage of the following tools:

    • CrowdStrike
    • Microsoft Intune, Defender, and SCCM
    • HCL Big Fix
    • Qualys
    • Rapid7

    Creating your own policies

    See Creating your own policies in the Security Posture Control application for more information about how to create your own policies.

    For example policies, see Examples of base, child, and cloned policies for Security Posture Control.

    See Create and activate custom policies for Security Posture Control for more information about the steps required to create a policy.

    See Mitigation controls policies for more information for more information about policies used for mitigation controls monitoring.