Executive Summary
Action RequiredMicrosoft Secure Score
CIS Microsoft 365 Benchmark
CIS Intune Compliance
CISA Security Baselines
Methodology
Read-Only AssessmentRemediation Roadmap
Compliance
PCI-DSS 4.0.1 Endpoint Compliance
Microsoft Recommendations
CIS Microsoft 365 Benchmark
CIS Intune Compliance
CIS Benchmarks for Microsoft Intune — evaluates deployed Intune policies against CIS security baseline requirements.
1
Policy Configuration
2
Assignment Coverage
3
Device Compliance
► Show failed controls
► Show missing controls
► Show manual review controls
CIS Azure Benchmarks
► Show failed controls
CISA Security Baselines
CISA SCuBA baseline assessment — evaluates Microsoft 365 configuration against CISA's official security recommendations.
► Show failed controls
► Show warning controls
► Show manual review controls
► Show error controls
Identity & Access
MFA Registration
► Show users with no MFA
► Show users with weak MFA
► Show users with Authenticator / TOTP
► Show users with phishing-resistant MFA
► Show department breakdown
Conditional Access
► Show report-only policies
► Show policies with exclusions
► Show disabled policies
CA Coverage
Privileged Access
► Show Global Administrators
► Show all role assignments
► Show service principal assignments
Device Management
► Show unmanaged devices
► Show stale devices
► Show excluded noise records
Cost Optimization
License Optimization
► Show disabled accounts with licenses
► Show inactive users with licenses
► Show savings by license type
► Show trials & subscription health
► Show downgrade recommendations
► Show tenant feature inventory
► Show plan coverage map
License Usage Analysis
► Show tenant feature inventory
► Manual verification items (admin portal checks)
► Show usage-verified downgrade opportunities
Collaboration & Data
Exchange Online
► Show accepted domains
► Show largest mailboxes
► Show forwarding rules
OneDrive for Business
► Show largest OneDrive accounts
► Show inactive OneDrive accounts
► Show users approaching quota
Teams Governance
► Show largest teams
► Show orphaned teams
► Show teams with guest members
Threat Posture
Defender Alerts
► Show active alerts