Workflow 4 min read Copy as Markdown View Markdown

Policies

A policy is a set of checks your CIs are assessed against on every scan. Policies lists the custom policies your CIs are assessed against.

Create a policy

1. On Policies, select Create New Policy.
2. Name it (for example, Endpoint Protection Policy), describe what it enforces and why, and add tags if you use them.
3. Choose how to start:
   • Build a policy from scratch with your own checks.
   • Based on Compliance Policy: start from an industry-standard template, then adjust it.
4. Select Next: Add Checks and add the checks.

Assign a policy

1. Open the policy and choose to assign it.
2. Select the CI groups to assess against it. Every member of a selected group is checked on each scan.
3. Save. The assignment summary shows which groups it covers.

If you have no CI groups yet, create one on Scan Configuration first. See Groups and environments.

See the results

• On a policy: each CI's result, and each check's result by CI.
• On a CI: how it fared against each policy on its most recent scan.
• On a scan: the Compliance Policy Results, with How to fix this for failed checks.