BSieffer,

Great question and we are answering it live! Here are some documents on how to create compliance polices and conditional access polices that will tie your Secure Score to securing your environment. 
Windows compliance settings in Microsoft Intune | Microsoft Docs

Building a Conditional Access policy - Azure Active Directory | Microsoft Docs

Here is some information on deploying MDE onboarding/offboarding with Endpoint Manager Intune:
Intune endpoint security Endpoint detection and response settings | Microsoft Docs

Hope this helps!