--- schema_version: "1" id: 0627a583fa5850a0188303fee24d5884d13aae5639ac834fb5bdcf8441357b6f title: Working with Governance Strategies collection: mulesoft version: current locale: en-us portal_url: https://docs.salesforce.com/mulesoft/current/en-us/general/exp-governance-work-with-strategies.md canonical_url: https://docs.mulesoft.com/general/exp-governance-work-with-strategies source_site: docs.mulesoft.com content_type: documentation content_hash: 2951ace0f0997459f12d23fbd8c82442ac163349fae09439219bb4fa92941a4a description: MuleSoft Documentation Site latest: true --- --- product: Getting Started keywords: governance strategies, api governance, governance workflows, mulesoft governance, strategy management, anypoint platform --- # Working with Governance Strategies > For the full documentation index, see: https://docs.mulesoft.com/llms.txt Use governance strategies to apply conformance rules and policies across agents, APIs, and MCP servers. When your tenant includes **Governance** and your account has the required role, you can create, manage, and monitor these strategies to validate service design compliance, automate runtime enforcement, and maintain visibility as your portfolio grows. > [!NOTE] Automate governance strategies using the MuleSoft MCP Platform Server. For details, see > [the Governance tools](https://docs.mulesoft.com/mulesoft-mcp-server/reference-mcp-tools-platform) in the MuleSoft MCP > Platform Server Tool Reference. Watch this video to see how to govern your portfolio with strategies: ![](https://play.vidyard.com/5yeeQCuwvyyhbZWKViK2U2.jpg) > [!NOTE] The MuleSoft interface uses two terms for strategy types: **controls** (for > guardrail-based strategies) and **automated policies**. In this documentation, "strategy" refers > to both types unless otherwise specified. ## Before You Begin Before getting started, make sure you have: - An Anypoint Platform account. - These permissions: - To create governance strategies, either: - API Governance: Governance Administrator - API Manager: Manage Policies - To view governance reports, either: - API Governance: Governance Viewer - API Governance: Governance Administrator For more information, see [Enhanced Experience Permissions](https://docs.mulesoft.com/general/exp-home-start#permissions). ## Access Governance Strategy Workflows Log in through your organization’s entry path and go to **Governance**. From **Governance** > **Governance Strategies**, create strategies and map them to approved services or scopes. You can also edit, enable, disable, reorder, or delete existing strategies. Work with your governance lead when strategy changes affect production or compliance workflows. ## Governance Strategy Workflows - Create strategies for compliance validation or runtime enforcement. See [Create Governance Strategies](https://docs.mulesoft.com/general/exp-governance-create-strategy). - Manage strategies by updating scope, rules, status, and priority. See [Managing Governance Strategies](https://docs.mulesoft.com/general/exp-governance-manage-strategies). - Monitor token usage in **Governance** > **Cost Management**. See [Managing Costs and Token Usage](https://docs.mulesoft.com/general/exp-governance-view-cost-and-token-usage). - Review conformance reporting for [supported catalog types](https://docs.mulesoft.com/general/exp-overview). - Apply policies to services from **Portfolio**. See [Viewing Service Details in the Portfolio](https://docs.mulesoft.com/general/exp-services-view-details). ## Akamai Security Findings in Conformance Reports When Akamai API Security is connected as a provider, the **Violations**, **Warnings**, and **Info** counts in the conformance report include Akamai security findings alongside governance rule results. A service can show a **Non-Conformant** status even when no governance rules are violated, if Akamai findings contribute violations. The Conformance tab includes a dedicated Akamai section with two tables: - **Security Findings**: Individual security issues detected by Akamai through live traffic inspection, broken down per instance and per endpoint. - **Incidents**: Recurring threats aggregated over time, with first- and last-seen timestamps and occurrence counts. Both tables have these sortable columns: **Finding**, **Instance**, **Endpoint**, and **Risk**. Akamai severity levels map to conformance tiers as follows: - Critical and High map to violations. - Medium maps to warnings. - Low and Info map to informational findings. The **Severity** filter at the top of the Conformance tab applies to both the governance rule results and the Akamai tables. ### Review a Finding Select a row in the **Security Findings** table to open the finding detail panel, which shows: - **Triggered On**: The endpoint path where the issue was detected. - **Risk**: The severity level. - **Exposure**: Whether the endpoint is internet-facing. - **Remediation Opportunities**: Curated recommended policies for this finding type. Select **Apply This Policy** to open the policy-apply flow with the policy pre-selected. Select **Browse in Policy Library** if no curated policy is listed. After a policy is applied, Akamai re-inspects live traffic and updates the finding status automatically. ### Review an Incident Select a row in the **Incidents** table to open the incident detail panel, which shows: **Detection Time**, **Type**, **Triggered On**, **Severity**, **Occurrences**, **Exposure**, OWASP tags, and Compliance Frameworks. ### Refresh Conformance Results After a scan runs, the API listing and API detail pages don’t automatically reflect the updated conformance status. To see the latest results, manually refresh in one of these ways: - Refresh a single API: On the API detail page, open the **Conformance** tab and select **Refresh**. - Refresh all APIs: On the **Governance Strategies** page, select **Refresh Report**. ## See Also - [Create Governance Strategies](https://docs.mulesoft.com/general/exp-governance-create-strategy) - [Managing Governance Strategies](https://docs.mulesoft.com/general/exp-governance-manage-strategies) - [Managing Costs and Token Usage](https://docs.mulesoft.com/general/exp-governance-view-cost-and-token-usage) - [Enhanced MuleSoft Experience Overview](https://docs.mulesoft.com/general/exp-overview) - [Enhanced Experience Permissions](https://docs.mulesoft.com/general/exp-home-start#permissions) - [Viewing Service Details in the Portfolio](https://docs.mulesoft.com/general/exp-services-view-details)