Step 8: Site Security Assesments

Site Security Assessments analyze various aspects of security for your sites, such as your password management policy, the status of your antivirus software, and your patch management.

The Site Security Assessment is a powerful tool you can use to show your clients what you’re doing to keep their sites safe. When a Security Assessment runs on a site, you’ll get a score of the vulnerabilities of the site. You can then see the issues that contributed to the score and what you can do to improve the site’s score the next time the assessment runs.

1. In Service Center, click Dashboards > Site Security Dashboard.

2. Click the add button 

   Open

   

   in the top right corner of the window.

3. Click the check box of a site.
   Note: If you don’t see the site you want in the list, type part of the site’s name in the search box and click the Search button.

4. Click the Add button.

View your Site’s Security Score

When a site is first added to the security assessment, it may take up to two hours to be scored. Once the site is assessed, you can visit the Site Security Dashboard to see the score your site has earned.

1. Two hours or longer after adding a site to the Site Security Assessment, in Service Center, click Dashboards > Site Security Dashboard.

   Open

   

   
   
   The Site Security Dashboard shows an overview of your site’s security scores, both the overall combined score, and the individual category scores. For more information, click a site name.

2. Click the name of the site that you added.

   Open

   

   
   
   On the Site Security Overview page, you can see more details of your scores, including the historical trend of your scores—whether the security score of any category is going up or down.
   For now, the trend graphs on this page will not provide historical information, since you just added the site to the Site Security Assessment. As time passes, you’ll see your site’s history.
   The colors of the category boxes let you identify at a glance which categories are at more risk than others. Green categories are at less risk than yellow and orange categories, while red categories are at the most risk. To customize the default colors and score ranges, click Configuration > Site Security, then click the Modify button.

3. Click the Patch Security box.

   Open

   

   
   The details page for the Patch Security category is displayed. On this page, you can see the details of the individual tests in this category and the score your site earned for each test.
   The impact of each test—how much it lowers your score in the category— is displayed as a colored bar on the right of the pag,e next to the test.
   Site Security Assessments are customizable globally and by individual site.
   You can customize:

   • The colors of category boxes

   • The score ranges for colors

   • The criteria of certain tests

   • Which tests are included in an assessment

• Click the arrow next to any test to see:

  • A description of the test

  • The number of devices at risk, if applicable

  • The impact of test failure

  • The countermeasure you can take to improve your score

If you want to try improving your Site Security Score, choose a test where you have a lower score and take the suggested countermeasure. The next time the Site Security Assessment runs, your score will improve.

For example, if you have a score of 50% score on the Software updates evaluation - Service packs test, you can improve this score by installing Service packs on devices that don’t have them. Click the arrow next to the test, then click the number link next to Devices at risk for a list of devices. Install the required Service packs on the devices. The next time a Site Security Assessment runs, you will see an improvement in your score and the percentage improvement is displayed in the Patch Security category box.

Now you can customize the look of your Service Center with your company’s logo.