Manage Policies in a Space
Enable, disable, and preview the security policies Mondoo uses to evaluate a space.
Policies are the security standards Mondoo applies to a space. Each new space starts with a default set of policies so you get useful results immediately. From there you control which policies run, in three ways:
| Action | Effect |
|---|---|
| Enable | The policy is used for scoring assets in the space. |
| Preview | The policy is evaluated, but its results don't affect scores. Use this to try a policy before adopting it. |
| Disable | The policy is no longer used in the space. Existing reports from the policy are removed. |
Changes apply only to the space you make them in. To learn how policies work conceptually, read How Mondoo Evaluates Your Infrastructure.
You can also manage policies from the command line. See cnspec policy.
Note: Managing policies requires Editor or Owner access to the space.
Open the policies list
-
In the Mondoo App, navigate to the space.
-
In the side navigation, under Findings, select Policies.
The Policies page lists every enabled and previewed policy in the space. The rest of this page references this list.
Enable or preview a new policy
-
On the Policies page, select the plus symbol (+) in the top-right corner.
-
Find the policy using the Filter search box.
-
Add the policy:
- To enable it, select ADD TO SPACE.
- To preview it (evaluate without scoring), select the three dots and then PREVIEW.
The next scan uses the new policy.
Switch a policy to Preview
Preview mode evaluates a policy without affecting scores. Use it to assess a new framework before formally adopting it.
-
On the Policies page, check the box next to one or more policies.
-
Select PREVIEW POLICY.
Disable a policy
-
On the Policies page, check the box next to one or more policies.
-
Select REMOVE POLICY.