Understanding the reports
Introduction
The Enforce365 platform automatically collects data from the Microsoft 365 tenant during weekends – or manually at any point in time.
This data contains the relevant configurations and information needed to provide the following report areas:
- Detailed Configurations overview report
- Recommendation reports
- Secure Score
- Defender for Identity
- Defender for Office 365
- Purview Data Compliance
- Attach Surface Reduction
- Official CIS18 compliance
- Policies, groups and descriptions (identify the relationship between groups and configurations)
You find the reports by clicking the Reports menu item and selecting the relevant report or simply by clicking
the 
icon on the relevant Dashboard widget.
Detailed Configurations overview report
The data collected (the configurations) from the Microsoft 365 tenant can be accessed in the detailed configuration overview report.
Having the data configurations stored historically gives the possibility to track changes, identify drift, troubleshoot issues based on a configuration change on a specific time frame as well as compare configurations against best practices.
This report supports the following functionality:
- Show everything or individual areas of the data collected from a specific date
- Compare two dates for additions, changes and deletions – with filtering to not show un-changed data
- Visual indicators show additions (green), changes (yellow) and deletions (red)
- Export of data
Data retention:
- There will be access to weekly data going back 3 months.
- After 3 months only the first data collection of a month will be available.
- There is currently no limit to the number of years for the monthly data.
Data example:
The Secure Score recommendation reports
The Secure Score report is collected directly from Microsoft 365. Secure Score recommendations marked yellow can be improved by the business.
The Secure Score report from Microsoft 365 is enriched by Enforce365 with extra information.
-
Level
- 1 = None to minor impact on the end-users
- 2 = May impact the end-users and will need some planning
- 3 = Will impact the end-users to a high degree and will need detailed planning
-
License
- P = Included in Business Premium
- E3 = Included in Microsoft 365 E3
- E5 = Included in full Microsoft 365 E5 or in Microsoft 365 E5 Security addon
-
Impact and Impact comment
- If the end-users or business are impacted, a comment will describe the scope of the impact
The remaining recommendation reports
The recommendation reports are based on the information collected from the Microsoft 365 tenant.
Criticality rating
The criticality is the rating of the recommendation importance translated into individual scores used for the category score and ultimately the score seen on the dashboard.
Ignore
If a recommendation is not relevant for your business, then you have the option of ignoring the item.
Ignoring a recommendation item, will exclude it from score calculations and visually be shown as grey.
Note: The score will be updated to exclude the ignored item the next time recommendations are processed – either automatically during the weekends or manually triggered.
Validation terms
The following terms are used to validate the best practice recommended value against the configured value that was collected from the Microsoft 365 tenant.
Term
Description
null
Must not have any value
notnull
Must have any value
or
Any of [VALUE],[VALUE],[VALUE] are ok
orne
None of [VALUE],[VALUE],[VALUE] are ok
orlike
Any like [*VALUE*],[*VALUE*],[*VALUE*] are ok
ornotlike
None like [*VALUE*],[*VALUE*],[*VALUE*] are ok
eq
Must be [VALUE]
ne
Must not be [VALUE]
like
Must be like [*VALUE*]
notlike
Must not be like [*VALUE*]
ge
Must be greater than or equal to [VALUE]
le
Must be less than or equal to [VALUE]
domains
Tenant accepted domains are ok
domainsornull
Tenant accepted domains or null are ok
notdomains
Tenant accepted domains are not ok
tranportruleown
Do not allow own domains
tranportruleother
Do not allow other domains
maillikedomains
Tenant accepted domain-mailadresses are ok
mailnotlikedomains
Tenant accepted domain-mailadresses are not ok
exists
[VALUE] exists
notexists
[VALUE] does not exist
days
Must be later than [VALUE] days back
Comments
All recommendation items support comments if needed. These can be added, edited and removed, and will show the person that created or changed the comment.
Questionnaires
A recommendation result that cannot be determined by looking at the collected configuration from the Microsoft 365 tenant will have a questionnaire item. Here you will provide the result manually usually by answering the question Yes or No. Each item can be extended to show details and supports comments as well.
