Security

How AssurIQ assesses business-owned iOS, iPadOS and Android devices: trust states, posture signals, cloud access graph and what each platform can actually enforce.

Trusted, At risk, Noncompliant, Unknown, Blocked: how signals (OS, patch level, encryption, passcode, integrity, check-in, data-protection policy, app governance) combine with confidence.

Why CVSS alone is not risk, and how AssurIQ combines severity, EPSS, KEV, exposure, criticality, mitigations and age.

Which data-protection and lifecycle controls are supported on supervised vs unsupervised iOS, fully managed, work-profile and dedicated Android — and why unsupported items are evidence gaps, not failures.

Approve, restrict or block apps by data-access scope; managed vs unmanaged apps; why the personal side of a work profile is never inventoried.

The ten-step guided incident: mark, assess, revoke sessions, lock, retire, rotate, validate, evidence, controls, report.

Device → User → Identity provider → Cloud app → Data; conditional access expectations and how untrusted-device sessions are surfaced.

Authenticated and unauthenticated scans, scopes, schedules and safe defaults.

Exploit Prediction Scoring System and how it weights AssurIQ Risk.

Known Exploited Vulnerabilities catalogue, due dates and the KEV-on-the-edge storyline.

External exposure, management interfaces and attack paths.

Privileged accounts, MFA coverage, legacy auth and stale identities.

On-prem AD hygiene checks and what evidence they produce.

End-of-life detection and the unsupported-endpoint storyline.

Difference between an approved control exception and a suppressed finding.