SecurityCustomize Security

Change Check Properties

Override the values that policy checks compare against.

Many policies have properties: the ideal values that checks compare against. If your organization's standard differs from a policy's default, change the property rather than disabling the check.

For example, the "Mondoo Microsoft Windows Security" policy checks that Windows requires passwords at least 14 characters long. That value lives in the mondooWindowsSecurityMinimumPasswordLength property. Change the property if your organization requires a different minimum.

Other examples of properties:

  • Whether to alert on certain events
  • Maximum time between password or key rotations
  • Allowed SSL or TLS ciphers
  • Allowed domains
  • Allowed algorithms
  • Blocked ports

Property changes apply only to the current space.

Change a property

Note: Requires Owner, Editor, or Policy Manager access to the space.

  1. In the Mondoo App, navigate to the space.

  2. In the side navigation, under Findings, select Policies.

    Mondoo - navigate to the security policies for a space

  3. Find the policy with the property you want to change and select it.

  4. If the policy has properties, a Properties tab appears. Select it to see each property and its current Value (MQL).

  5. Select the edit (pencil) button next to the property you want to change.

    Edit dialog for the minimum password length property of the Mondoo Microsoft Windows Security policy, with the Value (MQL) field and SAVE button

  6. In Value (MQL), enter the new value and select SAVE.

The change takes effect immediately. The next scan uses the new value.

To go back to the policy's default, open the property again, select Reset to default, and then select SAVE.

Set Exceptions on Policies

Add, approve, reject, and remove exceptions for checks across a whole space.

Change a Policy's Scoring System

Change how a policy combines check results into an asset risk score within a space.

On this page

Change a property