Exposure Report

The Exposure Report package provides a recurring, quantitative analysis of a customer's policy coverage across high-risk ports and protocols, measuring the degree of exposure remaining within the environment and how that exposure changes over time.

Illumio Professional Services collects data through read-only API queries against the platform, performs a read-only review of the Policy Compute Engine, and supplements that data with structured discussions with customer stakeholders. The collected data is analyzed to determine which high-risk communication paths remain open, where policy coverage is incomplete, and which areas of the environment carry the greatest residual exposure.

The package is sold as a set of four reports, intended to be delivered on a quarterly cadence. Because historical data is retained across reports, each successive report shows the delta from the prior period — providing customers with an objective, trended measure of security posture improvement rather than a single point-in-time snapshot.

Each report is generated by Illumio Professional Services and presented to customer stakeholders, accompanied by recommendations identifying the policy work that would most effectively reduce remaining exposure. The Exposure Report also contributes to the measurement of client maturity within the Illumio segmentation maturity model.

Package Dependencies

• None

Strongly Recommended Packages

• Containment Bundle, or equivalent completion of Platform Foundation Deployment, Labeling, Discovery, and Basic Policy – Core Services + Ransomware Health Check, as a companion engagement  

The Exposure Report requires an Illumio deployment that is meaningfully underway with initial policy developed. New or early-stage deployments will not have generated sufficient policy or traffic data to produce a meaningful analysis.  

Technical Readiness

• Operational Illumio platform with deployment activity underway
• Initial policy developed and present within the platform
• Workloads paired and reporting
• Read-only API access provisioned for Illumio Professional Services
• Read-only PCE access provisioned for Illumio Professional Services
• API connectivity available to the assessed environment  

Customer Readiness

• Primary technical point of contact assigned
• Illumio platform administrators available for structured discussions
• Security stakeholders available for findings presentation
• Access approvals completed prior to each report cycle
• Agreement on the reporting cadence

Data Collection and Platform Review

• Collect policy and traffic data through read-only API queries.
• Perform a read-only review of relevant Policy Compute Engine configuration.
• Review policy coverage across the managed workload estate.
• Review observed traffic associated with high-risk ports and protocols.
• Conduct structured discussions with customer stakeholders regarding policy scope, environment changes, and program progress since the prior report.

Customer Outcome

Customer's current policy coverage and high-risk traffic exposure are captured without requiring any changes to the production environment.

Exposure Analysis

• Evaluate policy coverage applied across the VEN estate.
• Analyze exposure associated with high-risk ports and protocols commonly used for lateral movement.
• Quantify the degree of exposure remaining within the assessed environment.
• Identify gaps in policy coverage contributing to residual exposure.
• Compare results against prior reports to establish trend and delta where historical data is available.
• Assess contribution to client maturity within the Illumio segmentation maturity model.

Customer Outcome

Customer receives an objective, quantitative measure of residual high-risk exposure and — across successive reports — a trended view of how security posture is improving over time.

Report Generation and Findings Presentation

• Generate the Exposure Report covering policy coverage, high-risk exposure findings, and period-over-period comparison where available.
• Document recommendations identifying the policy work that would most effectively reduce remaining exposure.
• Present findings and recommendations to customer stakeholders.
• Retain historical report data to support trend analysis in subsequent reporting periods.

Customer Outcome

Customer receives a presented, documented view of current exposure, measurable evidence of progress against prior periods, and prioritized recommendations for reducing remaining risk.

Each Exposure Report is typically delivered over one to two days of effort, scaling approximately linearly with the size and complexity of the customer deployment. The schedule for each report cycle will be established with the customer based on:

• Deployment size and number of workloads
• Policy volume and complexity
• Number of environments
• Stakeholder availability
• Access-provisioning timelines.

Recommended cadence: quarterly, beginning once initial policy has been developed, with the four reports delivered across the engagement term..

Delays in access provisioning or stakeholder availability may affect individual report cycles.

Talk to our Sales team to learn more about Services.

Explore our Professional Services at illumio.com/services/professional-services