Coverage scores are based on the security bases of perimeters (set of consumed measures) and the associations between measures and security controls.
They indicate to what extent the measures in place cover the requirements of the policies associated with the perimeters. It is the theoretical coverage defined in your policy.
💡 The coverage of a policy control has 3 scenarios:
First scenario:
You need to have both measure to cover 100% of the control.
Second scenario:
In this example, you have the choice of measures to put in place to cover this rule.
Third scenario:
A single measure allows you to be 100% compliant.
You can see the coverage score of your measures in the Policies tab > click on the policy > View "Coverage".
💡Efficiency of the measure is taken into the coverage score.