Manage Policies in a Space
Enable, disable, and preview the security policies Mondoo uses to evaluate a space.
Policies are the security standards Mondoo applies to a space. Each new space starts with a default set of policies so you get useful results immediately. From there you control which policies run, in three ways:
| Action | Effect |
|---|---|
| Enable | The policy is used for scoring assets in the space. |
| Preview | The policy is evaluated, but its results don't affect scores. Use this to try a policy before adopting it. |
| Disable | The policy is no longer used in the space. Existing reports from the policy are removed. |
Changes apply only to the space you make them in. To learn how policies work conceptually, read How Mondoo Evaluates Your Infrastructure.
You can also manage policies from the command line. See cnspec policy.
Note: Managing policies requires Editor or Owner access to the space.
Open the policies list
-
In the Mondoo App, navigate to the space.
-
In the side navigation, under Findings, select Policies.
The Policies page lists every enabled and previewed policy in the space. The rest of this page references this list.
Enable or preview a new policy
-
On the Policies page, select ENABLE POLICY in the top-right corner.
-
On the Enable Policies page, find the policy using the search box, or browse by Best Practices, Security, or Compliance.
-
Next to the policy, select ENABLE.
The next scan uses the new policy.
Switch a policy to Preview
Preview mode evaluates a policy without affecting scores. Use it to assess a new policy before formally adopting it.
-
Open the policy (from the Policies page or the Enable Policies page).
-
Select its status menu (the SCORED button) and choose Preview. The policy keeps running but no longer contributes to your space scores.
Disable a policy
-
Open the policy (from the Policies page or the Enable Policies page).
-
Select its status menu (the SCORED button) and choose Disable.