Event banner
Event details
I would love to see a mapping/reporting of what settings are ticking what box regarding to local and international industry standards.
- This is a difficult one. You can use MDE and Vulnerability Management to "baseline" your settings against certain industry recommendations (CIS/STIG), but a lot of it comes down to tracking your own configurations, and building your own based on your requirements. Unfortunately, as a lot of CSP settings change different registry keys than traditional GPO, I've seen many pen-test tools fail a device just because they're hard-coded to look at the GPO registry value.
- Mike-Danoski
Microsoft
This is fantastic advice from James. I was going to say the same for reg key and security enforcement inspection. Id also recommend looking to a benchmark that is MDM focused if you can.
