Improvement Actions
Implement controls to raise your Secure Score.
| Action | Category | Score impact | Status | Recommended action | |
|---|---|---|---|---|---|
| Enable multifactor authentication for all privileged accounts | Identity | +15.5 | Implemented | Implement enable multifactor authentication for all privileged accounts via Microsoft Entra/Intune. | |
| Require MFA for all users with administrative roles | Identity | +12.0 | In_progress | Implement require mfa for all users with administrative roles via Microsoft Entra/Intune. | |
| Enable Conditional Access policies for legacy authentication blocking | Identity | +10.5 | In_progress | Implement enable conditional access policies for legacy authentication blocking via Microsoft Entra/Intune. | |
| Turn on Microsoft Defender for Cloud for subscriptions | Cloud | +9.8 | In_progress | Implement turn on microsoft defender for cloud for subscriptions via Microsoft Entra/Intune. | |
| Enable ATP alerts in Microsoft 365 Defender | Security | +8.4 | Implemented | Implement enable atp alerts in microsoft 365 defender via Microsoft Entra/Intune. | |
| Enable self-service password reset | Identity | +7.2 | In_progress | Implement enable self-service password reset via Microsoft Entra/Intune. | |
| Block legacy authentication protocols | Identity | +6.8 | In_progress | Implement block legacy authentication protocols via Microsoft Entra/Intune. | |
| Enable audit logging for Azure resources | Compliance | +5.9 | Open | Implement enable audit logging for azure resources via Microsoft Entra/Intune. | |
| Enable Windows Defender Credential Guard | Device | +5.2 | In_progress | Implement enable windows defender credential guard via Microsoft Entra/Intune. | |
| Enable Microsoft Defender for Office 365 | Cloud | +4.7 | In_progress | Implement enable microsoft defender for office 365 via Microsoft Entra/Intune. |
