---
title: Rule Management
description: How Managed Rules and suppression control which CSPM findings appear, and when to use each.
product: Cspm
url: https://docs.digitalocean.com/products/cspm/concepts/rule-management/
last_updated: "2026-08-13"
---

> **For AI agents:** The documentation index is at [https://docs.digitalocean.com/llms.txt](https://docs.digitalocean.com/llms.txt). Markdown versions of pages use the same URL with `index.html.md` in place of the HTML page (for example, append `index.html.md` to the directory path instead of opening the HTML document).

# Rule Management

Cloud Security Posture Management (CSPM) evaluates your DigitalOcean resources for misconfigurations and security risks, surfaces findings by severity, and provides guidance to help you resolve them.

Cloud Security Posture Management (CSPM) evaluates your environment using a set of security rules. Paid plans provide two ways to control how those rules surface findings: Managed Rules and suppression.

## Managed Rules

Managed Rules controls whether a rule is enabled for your team. When you disable a rule, CSPM immediately hides all findings associated with that rule across all applicable resources. When you re-enable the rule, those findings return if the underlying conditions still exist.

Use Managed Rules when a rule does not apply anywhere in your environment. To enable or disable rules, see [How to Manage Rules](https://docs.digitalocean.com/products/cspm/how-to/manage-rules/index.html.md).

## Suppression

Suppression creates resource-level exceptions to an enabled rule. When you suppress a resource, CSPM hides the finding for that resource and rule combination. The rule remains enabled and continues to surface findings for other applicable resources.

Use suppression when a rule is relevant to your environment but one or more resources are intentional exceptions. To suppress findings, see [How to Suppress Findings](https://docs.digitalocean.com/products/cspm/how-to/suppress-findings/index.html.md). For details on what suppression does and does not change, see [Suppression Behavior](https://docs.digitalocean.com/products/cspm/concepts/suppression-behavior/index.html.md).

## Choosing the Appropriate Control

Disable a rule with Managed Rules when the rule should not apply anywhere in the team. Suppress findings when only selected resources should be excluded and the rule should remain active elsewhere.

Neither control modifies your DigitalOcean resources or resolves the underlying security condition. Both are available only in paid plans.