Extremely useful tool that once implement will massively increase your security posture.
Rating: 10 out of 10
IncentivizedUse Cases and Deployment Scope
SSPM has been used in our organisation to baseline our environments such as Azure/Office 365 against Industry standards such as NIST etc. We have been able to ascertain which policies need tweaking to make us complaint and remediate a large number of risks we had in our business. As a company with a small security team this allows us to see real time any policies which need to be fixed.
Pros
- Reporting on your environment compared to NIST/GDPR guidelines etc
- Wide range of integrations such as Box, Zoom and Microsoft packages
- Extremely easy to setup and configure as long as you are a global admin.
Cons
- More integrations to other environments
- GUI could be a bit easier to use
- More self explanatory what the options mean within SSPM itself.
Likelihood to Recommend
SSPM is ideal for scenarios in a work environment where you don't have a lot of resources or money to analyse your environments. This allows you to see how many devices are affected by the insecure rule and gives you instant feedback once the rule has been remediated and resolved.