Identity & Endpoint

Endpoints & Devices

Posture, hardened baselines with hourly drift repair, EDR, default-deny application control and patch rings

Baseline compliance

CIS Level 1

94%

ACSC Essential Eight · maturity 2

87%

Bangladesh Bank ICT security guideline controls

91%

SWIFT CSCF endpoint controls

100%

Drift repaired in the last 24 hours

Device	Setting	Drifted to	Restored to	Detected	Status
WS-0412	Disk encryption	Suspended	On	08:00 hourly check	Repaired
WS-0388	Local administrator	Enabled	Disabled	09:00	Repaired
WS-0571	Firewall profile	Off	On	09:00	Repaired
SRV-GOAML-2	Audit policy	Reduced	Full	10:00	Pending

Every managed setting is checked hourly and returned to its intended state if it drifts. Open-source path: osquery with Fleet for checks, Ansible or Salt for repair; Intune and other MDMs connect through Integrations.