ISPM Scoring

Identity Security Posture Management (ISPM) produces a 0-100 score for each workspace and a roll-up tenant score. Five risk categories contribute: dormant accounts (no login in N days), orphaned NHIs (service accounts with no owner), SoD violations (users with conflicting role pairs), stale credentials (secrets past rotation window), and open access review items.

Each category has a configurable weight. The score updates daily and is visible on the compliance dashboard alongside trend history.

Key Configuration

• Category weights (0-100 per category, normalized)
• Dormant account threshold (days)
• SoD violation rule sets
• Score refresh schedule