Adjusting cloud risk scores

The Forcepoint Data Security Cloud | SSE cloud risk score is assessed by a weighted formula calculating all of the attributes that the app has/doesn't have along with Forcepoint Data Security Cloud | SSE's automated trust rating.

These weights can be adjusted at any time by an admin on the Cloud Score Weights page. You can access this page by clicking it from the navigation tree under Discovery or from clicking the link displayed under the question mark next to the applications risk score.

For each attribute you can adjust the weight to 1 or more. The higher the number the more that particular attribute will be weighted in the cloud risk score. Meaning if you weight SOC2 compliance higher than other attributes, then it means applications that possess SOC2 compliance will have a higher (better) cloud risk score than applications that don't have SOC2. You can also adjust the slider for how much Forcepoint Data Security Cloud | SSE's automated Trust Rating factors into the overall weighted formula for the Cloud Risk Score.



Forcepoint Data Security Cloud | SSE assesses the following Attributes across 4 categories:

Compliance certifications

  1. Cobit
  2. Cloud Security Alliance (CSA) STAR
  3. FedRAMP
  4. Financial Industry Regulatory Authority (FINRA)
  5. Federal Information Processing Standards (FIPS) 140-2
  6. Federal Information Security Management Act (FISMA)
  7. Generally Accepted Accounting Principles (GAAP)
  8. Health Insurance Portability and Accountability Act (HIPAA)
  9. HITRUST
  10. ISAE3402
  11. ISO 27001
  12. International Traffic in Arms Regulations (ITAR)
  13. Information Technology Infrastructure Library (ITIL)
  14. Payment Card Industry (PCI) Data Security Standard (DSS) 3.2
  15. Privacy Shield
  16. System and Organization Controls (SOC) 1
  17. SOC 2
  18. SOC 3
  19. Sarbanes-Oxley Act (SOX)
  20. service provider (SP) 800-53
  21. TRUSTe

Security

  1. Admin Action Logging
  2. Data Sharing: File Sharing
  3. Data Sharing: Granular Access Controls
  4. Data Loss Prevention (DLP) Integration
  5. Heartbleed Patched
  6. multi-factor authentication (MFA)
  7. Password Policy
  8. Penetration Testing
  9. Security Assertion Markup Language (SAML) single sign-on (SSO)
  10. service level agreement (SLA) Present
  11. Trusted Certificate
  12. User Audit Trail
  13. User can upload data

Encryption

  1. Strong (Advanced Encryption Standard (AES) 256)
  2. Data Segregation by Tenant
  3. Transport Layer Security (TLS) 1.2
  4. Tenant Managed Keys

Legal

  1. Data Ownership
  2. Data Retention on Termination
  3. Digital Millennium Copyright Act (DMCA)
  4. General Data Protection Regulation (GDPR): Data Protection
  5. GDPR: Report data breaches
  6. GDPR: Right to erasure
  7. GDPR: User Ownership

Trust rating

Forcepoint Data Security Cloud | SSE's trust rating is assessed automatically via machine learning taking into account factors such as public signals, ownership information, usage information, etc compared across other application within their categories.