Articles in this section

Compliance Trends Over Time Suppression Percentage

The aim of this article is to provide information about the suppression percentage seen within the Compliance Trends graph and why the calculated figure can be higher than expected for some of our users.

 

The suppression percentage is linked to Compliance Reports which are available in the UI. In the below example, as shown in the screenshot, the figure is showing over 70% of the GCP resources are suppressed.

 

mceclip0.png

When navigating to Compliance/GCP/Reports there are a number of report types to choose from. In this case, the organization had moved to GCP CIS Benchmark 1.2 and had therefore suppressed all resources within the 1.0 Benchmark (GCP CIS Benchmark).
 

2.jpg

 

This is how the large (over 70%) suppression figure was being calculated. Lacework plan to remove the older Benchmarks and enable the new versions by default, meaning these figures will be adjusted. 

 

In summary: 

The Compliance Trend Over Time Suppression Percentage is calculated across all available Compliance Reports for your chosen Cloud Service (AWS, GCP, Azure).