Discern for Mimecast is a security control management and dashboarding platform that integrates with Mimecast to help organizations assess, optimize, and automate their email security configurations. The platform connects to Mimecast via API to ingest data including user information, internal domains, email threat logs, and suspicious emails. Administrators can also upload Mimecast policies as CSV files. This data is processed by Discern's AiPM engine to generate configuration scorecards, recommendations, and remediation workflows. Key functional areas include: - Security control assessment: Identifies unused or misconfigured Mimecast controls and provides prioritized hardening recommendations via scorecards. - Framework mapping: Maps Mimecast security controls to MITRE ATT&CK and CIS frameworks to track progress and support compliance reporting. - Risky user identification: Uses Mimecast data to flag high-risk users, including top targeted email addresses, users with risky behaviors, gaps in password policies, and users lacking MFA. - Cross-tool policy optimization: Leverages Mimecast insights to inform and adjust policy settings in other security tools such as CASB and EDR. - Automated policy enforcement: Supports closed-loop automation for email security policy management. - CISO dashboards: Provides a single-pane-of-glass view of overall security health, including control coverage gaps, user and device risks, and step-by-step remediation guidance. Dashboards also support peer benchmarking of security programs.