Extremely useful tool that once implement will massively increase your security posture.
Use Cases and Deployment Scope
SSPM has been used in our organisation to baseline our environments such as Azure/Office 365 against Industry standards such as NIST etc. We have been able to ascertain which policies need tweaking to make us complaint and remediate a large number of risks we had in our business. As a company with a small security team this allows us to see real time any policies which need to be fixed.
Pros
- Reporting on your environment compared to NIST/GDPR guidelines etc
- Wide range of integrations such as Box, Zoom and Microsoft packages
- Extremely easy to setup and configure as long as you are a global admin.
Cons
- More integrations to other environments
- GUI could be a bit easier to use
- More self explanatory what the options mean within SSPM itself.
Return on Investment
- 85% of devices now compliant with GDPR
- 90% of devices now compliant with PCI DSS
Alternatives Considered
Cisco Umbrella