There may be security configurations and security policies you don't want to factor in to to your security posture score. For example, you may have a setup you use only for testing. It's easy to exclude configurations and policies from scoring.

Manage what contributes to scoring

View which security policies are included in your security posture score.

1. On the top right of the Security Hub screen, click the Manage security policies button.
   The dialog that opens lets you filter by security configuration and make changes.
2. Select the security configuration you want to view or change.
3. If you want to exclude the entire security configuration from scoring, turn on the Exclude this configuration checkbox.
4. View and act on specific policies within the selected security configuration. To:
   • exclude a single security policy, turn off its checkbox within the Include column.
   • exclude all policies in this list, turn off the checkbox at the top of the Include column.
   • include all policies in this list, turn on the checkbox at the top of the Include column.
5. Click Save.