Enabling Application security in MaaS360

Information about enabling Application security in the MaaS360® Portal.

To enable Application security in the Maas360 Portal, the Risk Based Application Patching offering must be enabled.

Attention: The Risk Based Application Patching offering is available for non-federal customers only. This offering is not available to federal customers until FedRAMP approval is obtained for the required services.

To enable the Risk Based Application Patching offering:

From the IBM® MaaS360 Portal home page, go to Setup > Services.

Select the following service.

Service	Description
Risk Based Application Patching	When this service is enabled, MaaS360 automatically enables the User Risk Management service, facilitating the use of a next-generation analytics engine to identify vulnerable third-party apps deployed across an organization and their associated vulnerabilities. MaaS360 displays the Application security widget on the Security dashboard. This widget provides a comprehensive overview of vulnerable third-party apps deployed across an organization and their associated vulnerabilities, aiding in the detection and management of application security risks. The widget also displays the top 5 vulnerable apps in an organization that are sorted by severity. MaaS360 displays the Application security risk rule in the Risk Rule Configurator, which is enabled by default and checks the application security posture of a device. When app vulnerabilities are detected, MaaS360 creates a risk incident and then validates it against this risk rule to calculate the severity and risk score for devices and users.

Service

Description

Risk Based Application Patching

When this service is enabled,

MaaS360 automatically enables the User Risk Management service, facilitating the use of a next-generation analytics engine to identify vulnerable third-party apps deployed across an organization and their associated vulnerabilities.
MaaS360 displays the Application security widget on the Security dashboard. This widget provides a comprehensive overview of vulnerable third-party apps deployed across an organization and their associated vulnerabilities, aiding in the detection and management of application security risks. The widget also displays the top 5 vulnerable apps in an organization that are sorted by severity.
MaaS360 displays the Application security risk rule in the Risk Rule Configurator, which is enabled by default and checks the application security posture of a device. When app vulnerabilities are detected, MaaS360 creates a risk incident and then validates it against this risk rule to calculate the severity and risk score for devices and users.