Description:

Verifies that at least one Conditional Access policy enforces device compliance.

Why:

Microsoft recommends creating at least one conditional access policy enforcing device compliance.

Configured: At least one Conditional Access policy enforces device compliance.

Not Configured: No Conditional Access policy enforces device compliance.

Scoring: Contributes up to 1 point to the Posture Recommendations score.

Category: Identity

Microsoft Licensing: Requires Premium (P1) licensing

Remediation in Augmentt: Conditional Access Policy manager

Compliance Frameworks:

  • CIS Microsoft 365 Benchmark v6 (Level 1) — 5.2.2.9

  • CIS Microsoft 365 Benchmark v7 (Level 1) — 5.2.2.9

Microsoft documentation: