AMA: Cloud-connected endpoints with Microsoft Endpoint Manager

BSieffer,

Great question and we are answering it live! Here are some documents on how to create compliance polices and conditional access polices that will tie your Secure Score to securing your environment. 
https://docs.microsoft.com/en-us/mem/intune/protect/compliance-policy-create-windows

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-policies#:~:text=Conditions%201%20Sign-in%20risk.%20For%20organizations%20with%20Azure,based%20on%20their%20attributes%20in%20a%20policy.%20

Here is some information on deploying MDE onboarding/offboarding with Endpoint Manager Intune:
https://docs.microsoft.com/en-us/mem/intune/protect/endpoint-security-edr-profile-settings

Hope this helps!