Configuring a protect policy for SharePoint sites suggests sites need to be selected in order to be scanned.
"No Sites has been selected" for the sites section.
By default, the policy is all-inclusive (All sites are scanned). Adding a site makes only the individual site inclusive and all other sites are excluded from the policy.
Broadcom is evaluating how to make the CloudSOC interface as clear as possible.