Managing Policy Coverage
Enabling and disabling policies
All Secberus policies are enabled by default when an organization is created and when new policies are released.
Enabled policies will run against the data collected from monitored data sources to determine if there are violations. This occurs for scheduled scans and when changes are detected.
Disabled policies are no longer applied to any data sources, and will not run against collected data.
When a new data source is added to an account organization, all enabled policies that include the relevant resource types will automatically be applied.
Note
Only users with permissions to create, edit, and remove policies will be able to enable or disable a policy and update data source coverage.
To set the Status of a policy, navigate to the Policy list under the Policies section. Locate the Status column in the policy list table, and select the desired status: On (enabled), Off (disabled).
![policies list.png Policy list](https://files.readme.io/0674288-policy_status.png)
The policy status can also be managed on an individual policy page:
![enable policy.png Enable policy](https://files.readme.io/cc294c9-change_status.png)
Modifying coverage
To change the data sources a policy is applied to, navigate to a policy, and click on the Coverage tab.
![Policy page - coverage - data sources covered.png Coverage](https://files.readme.io/0263e34-coverage.png)
Click on the Manage coverage button to view all applicable data sources. Select the data sources the policy should cover and then Continue.
![data source coverage.png Select data sources](https://files.readme.io/598a234-manage_coverage.png)
The policy coverage list will include a timestamp for the last time the policy was run against each data source, as well as provide a status on whether the policy execution was successful. To troubleshoot issues for failed policy execution, visit the Data sources screen under Settings or check the Activity log.
Updated 7 months ago