Improve Security Posture Score in Trellix Insights

Prev Next

Security Posture Score represents the security posture of an organization. Trellix Insights evaluates the overall security score of an organization and provides recommendations that can protect your organization from threats.

Overall security posture is the combination of Endpoint (Endpoint Security only) and Cloud scores.

Endpoint security posture score

The Endpoint Score is calculated by aggregating the content, zero-day threats, configuration, and detection prevalence of the devices (Windows and Linux) that have Endpoint Security installed on them.

  • Content (Endpoint Security) verifies that the AMCore content versions are sufficient to protect against known campaigns.

  • Zero-day (Endpoint Security) analyzes the configuration and content associated with Adaptive Threat Protection and Real Protect in order to detect zero-day malware.

  • Configuration (Endpoint Security) utilizes On-Access Scan, Global Threat Intelligence, Access Protection, and Exploit Prevention to detect threats.

  • Detection Prevalence identifies the number of unresolved campaign-related events on devices based on the severity of the campaigns which are examined by the Threat Intelligence Group (TIG) team. For example, an unresolved event caused by a high severity campaign will result in a lower posture score than one caused by a low severity campaign.

  • Vulnerability Assessment identifies the number of unresolved campaign detections and their associated CVEs in your environment based on the severity of the campaigns which are examined by the Trellix Advanced Research Center. For example, an unresolved CVE results in a lower posture score.

Cloud security posture score

Cloud score is the combination of Visibility and Control scores derived from Cloud Security Advisor.

  • Visibility measures how effectively you have gained visibility into your cloud environment and how secure it is.

  • Control measures how effectively you have controlled and mitigated the security risks of data and activity in your cloud environment.

In addition to your overall score, Trellix Insights displays insufficiencies within your environment and offers recommendations for maximum protection.