McAfee EPOLICY ORCHESTRATOR 4.0.2 - Podręcznik Użytkownika Pobierz pdf (Strona 43)

Scoring Audits

When Policy Auditor performs an audit on a managed system, it accepts as input the state of

the system and any benchmarks in the audit, and produces several types of output, including

a human-readable report about compliance that includes the compliance score and a listing of

which rules passed and which failed on the system.

Policy Auditor supports all of the scoring models described in the XCCDF 1.1.4 specifications.

When Policy Auditor performs an audit, it uses any of the score computation models designated

by the user.

Are you scoring audits for the first time?

When scoring audits for the first time:

• Understand the different types of scoring models and how they work

• Understand how to change a scoring audit to fit your organizational needs

Contents

Score computation algorithms

Changing the scoring model

Score computation algorithms

Policy Auditor provides you with the means to score audits according to four different scoring

models. McAfee Policy Auditor uses the flat unweighted scoring model normalized to a value

of 100 as its default scoring model.

Default scoring model

While the default scoring model is the default for XCCDF, Policy Auditor uses the flat unweighted

scoring model normalized to 100. While the other scoring models can be useful and are

supported, the model used by McAfee allows easy and meaningful comparison between audits

on managed systems.

In the default model, computation of the score is performed independently for each collection

of su/jointfilesconvert/341810/bgroups and rules in each group, and then for each rule and group within the benchmark.

The final test score is the normalized score value on the benchmark object.

Flat scoring model

The flat scoring model computes the sum of the weights for the rules that passed as the score,

and the sum of the weights of all applicable rules as the maximum possible score. Though this

43McAfee Policy Auditor 5.0 Product Guide

1 2 ... 38 39 40 41 42 43 44 45 46 47 48 ... 95 96

Brak uwag

McAfee EPOLICY ORCHESTRATOR 4.0.2 - Podręcznik Użytkownika Strona 43