{ "api_version": "1", "kind": "dse_post", "self": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-563-separate-a-local-cloud-app-score-override-from-a-catalog-correction-request/", "item": { "id": "https://update.dsesecurity.com/updates/dse-20260909-563-separate-a-local-cloud-app-score-override-from-a-catalog-correction-request/", "slug": "dse-20260909-563-separate-a-local-cloud-app-score-override-from-a-catalog-correction-request", "url": "https://update.dsesecurity.com/updates/dse-20260909-563-separate-a-local-cloud-app-score-override-from-a-catalog-correction-request/", "alternate_urls": { "markdown": "https://update.dsesecurity.com/updates/dse-20260909-563-separate-a-local-cloud-app-score-override-from-a-catalog-correction-request.md", "json": "https://update.dsesecurity.com/api/v1/posts/dse-20260909-563-separate-a-local-cloud-app-score-override-from-a-catalog-correction-request/" }, "title": "Separate a local cloud-app score override from a catalog correction request", "summary": "Should a disputed Defender for Cloud Apps score be overridden locally or submitted for catalog review?", "format": { "slug": "guide", "name": "Guide" }, "priority": { "slug": "info", "name": "Information" }, "featured": false, "image": { "theme": "cyber-defense", "label": "Cyber defense", "alt": "Layered glass and metal cyber-defense structure with controlled blue and gold signal paths.", "card_url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-card.webp?v=1.8.20", "hero_url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-hero.webp?v=1.8.20", "social_url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-social-v2.jpg?v=1.8.20", "width": 2400, "height": 1350 }, "topics": [ { "slug": "cybersecurity", "name": "Cybersecurity", "url": "https://update.dsesecurity.com/topic/cybersecurity/" }, { "slug": "it", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "author": { "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team", "type": "Organization" }, "publisher": { "name": "Detection Systems & Engineering", "url": "https://dsesecurity.com/" }, "published_at": "2026-09-10T00:22:33+00:00", "modified_at": "2026-09-10T02:14:31+00:00", "reviewed_on": "2026-09-09", "reading_minutes": 2, "word_count": 270, "potentially_affected": "Administrators reviewing application scores in the Defender for Cloud Apps catalog.", "dse_recommendation": "Record whether the disagreement concerns organizational preference or inaccurate catalog evidence before choosing the change path.", "primary_source": { "name": "Cloud app catalog and risk scores - Microsoft Defender for Cloud Apps | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/defender-cloud-apps/risk-score", "published_on": null, "authority": "Microsoft Learn" }, "publishing_principles": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usage_info": "https://update.dsesecurity.com/usage/", "copyright_notice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "content_html": "

Source facts

\n

Defender for Cloud Apps permits overriding one application’s score without changing the scoring weights. Microsoft recommends an app note explaining the override to other administrators. A separate review request can propose a new risk factor, revised score or correction to outdated app information. Score-metric settings instead change the importance of fields or categories; including N/A values contributes negatively to the calculation. An unscored app usually has unknown properties. Microsoft Learn.

\n

Applicability

\n

Identify the precise catalog application and the disputed value. Keep a local acceptance decision separate from a claim that the vendor’s recorded attributes are wrong. This article addresses score administration, not a legal-compliance determination or proof that an application is safe.

\n

DSE recommendation

\n

Record whether the disagreement concerns organizational preference or inaccurate catalog evidence before choosing the change path. For a local override, preserve the original value, reason, approver and review trigger in the app note and decision record. For an evidence correction, submit the disputed field and supporting material for catalog review. Avoid changing global weights merely to make one approved application reach a desired number. Treat unknown attributes as unanswered questions rather than silently converting them into assurance.

\n

Verification

\n

After an authorized change, inspect the specific app’s displayed score and explanation. Check that broader scoring settings were not unintentionally altered. Track a catalog-review request separately until its outcome is known, and reconsider any temporary local override when the underlying information changes. In reporting, identify the score’s origin so readers can distinguish a locally chosen value from the catalog’s assessment.

\n

Official references

\n

Microsoft Learn: Find your cloud app and calculate risk scores. Source reviewed September 9, 2026.

", "content_text": "Source facts\nDefender for Cloud Apps permits overriding one application’s score without changing the scoring weights. Microsoft recommends an app note explaining the override to other administrators. A separate review request can propose a new risk factor, revised score or correction to outdated app information. Score-metric settings instead change the importance of fields or categories; including N/A values contributes negatively to the calculation. An unscored app usually has unknown properties. Microsoft Learn.\nApplicability\nIdentify the precise catalog application and the disputed value. Keep a local acceptance decision separate from a claim that the vendor’s recorded attributes are wrong. This article addresses score administration, not a legal-compliance determination or proof that an application is safe.\nDSE recommendation\nRecord whether the disagreement concerns organizational preference or inaccurate catalog evidence before choosing the change path. For a local override, preserve the original value, reason, approver and review trigger in the app note and decision record. For an evidence correction, submit the disputed field and supporting material for catalog review. Avoid changing global weights merely to make one approved application reach a desired number. Treat unknown attributes as unanswered questions rather than silently converting them into assurance.\nVerification\nAfter an authorized change, inspect the specific app’s displayed score and explanation. Check that broader scoring settings were not unintentionally altered. Track a catalog-review request separately until its outcome is known, and reconsider any temporary local override when the underlying information changes. In reporting, identify the score’s origin so readers can distinguish a locally chosen value from the catalog’s assessment.\nOfficial references\nMicrosoft Learn: Find your cloud app and calculate risk scores. Source reviewed September 9, 2026.", "content_markdown": "## Source facts\n\nDefender for Cloud Apps permits overriding one application’s score without changing the scoring weights. Microsoft recommends an app note explaining the override to other administrators. A separate review request can propose a new risk factor, revised score or correction to outdated app information. Score-metric settings instead change the importance of fields or categories; including N/A values contributes negatively to the calculation. An unscored app usually has unknown properties. [Microsoft Learn](https://learn.microsoft.com/en-us/defender-cloud-apps/risk-score).\n\n## Applicability\n\nIdentify the precise catalog application and the disputed value. Keep a local acceptance decision separate from a claim that the vendor’s recorded attributes are wrong. This article addresses score administration, not a legal-compliance determination or proof that an application is safe.\n\n## DSE recommendation\n\nRecord whether the disagreement concerns organizational preference or inaccurate catalog evidence before choosing the change path. For a local override, preserve the original value, reason, approver and review trigger in the app note and decision record. For an evidence correction, submit the disputed field and supporting material for catalog review. Avoid changing global weights merely to make one approved application reach a desired number. Treat unknown attributes as unanswered questions rather than silently converting them into assurance.\n\n## Verification\n\nAfter an authorized change, inspect the specific app’s displayed score and explanation. Check that broader scoring settings were not unintentionally altered. Track a catalog-review request separately until its outcome is known, and reconsider any temporary local override when the underlying information changes. In reporting, identify the score’s origin so readers can distinguish a locally chosen value from the catalog’s assessment.\n\n## Official references\n\n[Microsoft Learn: Find your cloud app and calculate risk scores](https://learn.microsoft.com/en-us/defender-cloud-apps/risk-score). Source reviewed September 9, 2026." }, "json_ld": { "@context": "https://schema.org", "@graph": [ { "@type": "Organization", "@id": "https://dsesecurity.com/#organization", "name": "Detection Systems & Engineering", "alternateName": "DSE Security", "url": "https://dsesecurity.com/", "logo": { "@type": "ImageObject", "url": "https://update.dsesecurity.com/assets/dse-logo-20260812.png?v=1.8.20" } }, { "@type": "Organization", "@id": "https://update.dsesecurity.com/#editorial-team", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/", "parentOrganization": { "@id": "https://dsesecurity.com/#organization" } }, { "@type": "WebSite", "@id": "https://update.dsesecurity.com/#website", "name": "DSE Updates", "alternateName": "DSE Security Knowledge Hub", "url": "https://update.dsesecurity.com/", "inLanguage": "en-US", "publisher": { "@id": "https://dsesecurity.com/#organization" }, "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://update.dsesecurity.com/?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@type": "WebPage", "@id": "https://update.dsesecurity.com/updates/dse-20260909-563-separate-a-local-cloud-app-score-override-from-a-catalog-correction-request/", "url": "https://update.dsesecurity.com/updates/dse-20260909-563-separate-a-local-cloud-app-score-override-from-a-catalog-correction-request/", "isPartOf": { "@id": "https://update.dsesecurity.com/#website" }, "lastReviewed": "2026-09-09" }, { "@type": "BreadcrumbList", "@id": "https://update.dsesecurity.com/updates/dse-20260909-563-separate-a-local-cloud-app-score-override-from-a-catalog-correction-request/#breadcrumbs", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "DSE Updates", "item": "https://update.dsesecurity.com/" }, { "@type": "ListItem", "position": 2, "name": "Separate a local cloud-app score override from a catalog correction request", "item": "https://update.dsesecurity.com/updates/dse-20260909-563-separate-a-local-cloud-app-score-override-from-a-catalog-correction-request/" } ] }, { "@type": [ "Article", "TechArticle" ], "@id": "https://update.dsesecurity.com/updates/dse-20260909-563-separate-a-local-cloud-app-score-override-from-a-catalog-correction-request/#article", "identifier": "https://update.dsesecurity.com/updates/dse-20260909-563-separate-a-local-cloud-app-score-override-from-a-catalog-correction-request/", "url": "https://update.dsesecurity.com/updates/dse-20260909-563-separate-a-local-cloud-app-score-override-from-a-catalog-correction-request/", "headline": "Separate a local cloud-app score override from a catalog correction request", "description": "Should a disputed Defender for Cloud Apps score be overridden locally or submitted for catalog review?", "abstract": "Should a disputed Defender for Cloud Apps score be overridden locally or submitted for catalog review?", "articleBody": "Source facts\nDefender for Cloud Apps permits overriding one application’s score without changing the scoring weights. Microsoft recommends an app note explaining the override to other administrators. A separate review request can propose a new risk factor, revised score or correction to outdated app information. Score-metric settings instead change the importance of fields or categories; including N/A values contributes negatively to the calculation. An unscored app usually has unknown properties. Microsoft Learn.\nApplicability\nIdentify the precise catalog application and the disputed value. Keep a local acceptance decision separate from a claim that the vendor’s recorded attributes are wrong. This article addresses score administration, not a legal-compliance determination or proof that an application is safe.\nDSE recommendation\nRecord whether the disagreement concerns organizational preference or inaccurate catalog evidence before choosing the change path. For a local override, preserve the original value, reason, approver and review trigger in the app note and decision record. For an evidence correction, submit the disputed field and supporting material for catalog review. Avoid changing global weights merely to make one approved application reach a desired number. Treat unknown attributes as unanswered questions rather than silently converting them into assurance.\nVerification\nAfter an authorized change, inspect the specific app’s displayed score and explanation. Check that broader scoring settings were not unintentionally altered. Track a catalog-review request separately until its outcome is known, and reconsider any temporary local override when the underlying information changes. In reporting, identify the score’s origin so readers can distinguish a locally chosen value from the catalog’s assessment.\nOfficial references\nMicrosoft Learn: Find your cloud app and calculate risk scores. Source reviewed September 9, 2026.", "datePublished": "2026-09-10T00:22:33+00:00", "dateModified": "2026-09-10T02:14:31+00:00", "mainEntityOfPage": { "@id": "https://update.dsesecurity.com/updates/dse-20260909-563-separate-a-local-cloud-app-score-override-from-a-catalog-correction-request/" }, "inLanguage": "en-US", "isAccessibleForFree": true, "author": { "@type": "Organization", "name": "DSE Security Editorial Team", "url": "https://update.dsesecurity.com/#editorial-team" }, "publisher": { "@id": "https://dsesecurity.com/#organization" }, "image": { "@type": "ImageObject", "@id": "https://update.dsesecurity.com/updates/dse-20260909-563-separate-a-local-cloud-app-score-override-from-a-catalog-correction-request/#primaryimage", "url": "https://update.dsesecurity.com/assets/editorial/cyber-defense-social-v2.jpg?v=1.8.20", "contentUrl": "https://update.dsesecurity.com/assets/editorial/cyber-defense-social-v2.jpg?v=1.8.20", "width": 1200, "height": 630, "caption": "Separate a local cloud-app score override from a catalog correction request" }, "articleSection": [ "Cybersecurity", "IT" ], "keywords": [ "Cybersecurity", "IT", "Guide", "Information priority" ], "genre": "Guide", "about": [ { "@type": "Thing", "name": "Cybersecurity", "url": "https://update.dsesecurity.com/topic/cybersecurity/" }, { "@type": "Thing", "name": "IT", "url": "https://update.dsesecurity.com/topic/it/" } ], "wordCount": 270, "timeRequired": "PT2M", "publishingPrinciples": "https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/", "usageInfo": "https://update.dsesecurity.com/usage/", "copyrightHolder": { "@id": "https://dsesecurity.com/#organization" }, "copyrightNotice": "Copyright © 2026 Detection Systems & Engineering. All rights reserved.", "citation": { "@type": "CreativeWork", "name": "Cloud app catalog and risk scores - Microsoft Defender for Cloud Apps | Microsoft Learn", "url": "https://learn.microsoft.com/en-us/defender-cloud-apps/risk-score" } } ] } }