25+ yearsIT & cybersecurity experience
Certified expertsCISSP · C|CISO · Microsoft · Cisco
Southern CaliforniaLocal and on-site, based in Irvine
NationwideRemote audits & advisory
Schedule a consultation1
Every enrolled platform (Windows, macOS, iOS, Android) has an assigned compliance policy.
2
Devices with no compliance policy are marked Not compliant in the tenant settings.
3
Conditional Access requires a compliant device for email and files.
4
MFA is required for all users and for device enrollment.
5
Legacy authentication is blocked by Conditional Access.
6
BitLocker is enforced and every recovery key is stored in Entra ID.
7
Defender Antivirus, tamper protection and attack surface reduction rules are enforced.
8
Windows LAPS manages local administrator passwords.
9
Update rings have deadlines, and every device runs a supported Windows version.
10
App protection stops copy, paste and save-as of company data on phones.
11
Personal devices can only enroll where a BYOD program exists.
12
Stale devices are retired automatically.
13
There are 2-4 Global Administrators, using just-in-time (PIM) access.
14
The Apple push certificate and other tokens are not expiring within 90 days.
15
Someone reviews the Intune audit log and alerts regularly.
Your result
—
0 of 15 answered
Answer the questions on the left. Your score updates as you go.
Strong foundation
Your answers suggest the key controls are in place. An audit confirms they are enforced on every device, and finds the ones that fail to apply.
Gaps are likely
Several important controls are missing or unconfirmed. These are exactly the gaps attackers and insurers look for.
High exposure
Company data is probably reachable from unmanaged or unprotected devices. Start with compliance enforcement, BitLocker keys and admin access.
Initial guidance only; it does not replace a professional audit. Answers are not sent anywhere.
Free self-assessments
Not ready to talk? Get a first read for free.
Free tools give initial guidance only; they do not replace a professional audit.
FAQ
About the self-check
How the score works and how it differs from the full audit.
Yes counts 2 points, Partly 1, and No or Not sure 0, out of 30. The score is shown as a percentage. Not sure counts as 0 because an unconfirmed control cannot be relied on.
No. The self-check reflects what you believe is configured. The audit checks what is actually configured and applied, across 127 checks, with evidence.
No. The self-check runs in your browser and nothing is sent to OC Security Audit.
