Search documentation

…to PASS, PARTIAL or FAIL based on what the evidence actually shows. Assurance confidence Assurance Confidence is a separate score from the framework percentage. It reflects how…

…atus This article is a concise reference. A fully expanded guide for “Assurance Confidence” is scheduled in the documentation roadmap; the steps below are accurate for the current…

…is article is a concise reference. A fully expanded guide for “Mobile Assurance Overview” is scheduled in the documentation roadmap; the steps below are accurate for the current pr…

…verview Enable frameworks, review applicability and read your first assurance scores. Documentation status This article is a concise reference. A fully expanded guide for “Init…

…n informational marker, not an error: it fires whenever a framework's assurance percentage changes since it was last viewed. It exists so nobody mistakes a moved score for a data p…

Overview Framework coverage, control states and exceptions. Documentation status This article is a concise reference. A fully expanded guide for “Compliance…

Overview Every control AssurIQ tracks sits in exactly one of six states at any point in time. These states are deliberately precise so a report never has to g…

Overview How one artifact proves multiple controls and frameworks. Documentation status This article is a concise reference. A fully expanded guide for “Lin…

…board-ready summary showing each element's current control state and assurance confidence, suitable as supporting material for the qualified individual's annual report. Disclaim…

Overview Mapping strength, one-control-many-requirements leverage and coverage math. Documentation status This article is a concise reference. A fully expan…

Overview Read control results and post manual evidence. Documentation status This article is a concise reference. A fully expanded guide for “Controls and E…

Purpose The Defender for Endpoint connector pulls device risk score, vulnerability, EDR alert and onboarding status via the Microsoft Graph Security API, feed…

Overview Create a managed customer or a direct customer, choose frameworks and set the primary contact. Documentation status This article is a concise refer…

Purpose The Azure connector uses a read-only service principal to inventory subscriptions, resource groups, virtual machines, network security groups and publ…

Overview CVSS scores describe how severe a vulnerability could theoretically be if exploited under worst-case conditions. It says nothing about whether that v…

Overview Versioned packs, upgrades and how history is preserved. Documentation status This article is a concise reference. A fully expanded guide for “Frame…

Overview The HIPAA Security Rule requires covered entities and their business associates to protect the confidentiality, integrity and availability of electro…

Purpose On-prem Active Directory integration reads domain user, group and Group Policy state through a lightweight collector-side query so AssurIQ can assess…

Purpose The UniFi connector reads controller (UniFi Network Application or UniFi OS Console) inventory, client, VLAN and firmware state so AssurIQ can assess…

Purpose The Aruba integration polls Aruba switches, controllers and Aruba Central-managed access points to collect VLAN, wireless client and configuration evi…

Overview Executive reports summarize risk, assurance and operational trends in language a non-technical stakeholder can act on. Report Studio builds thes…

Overview The Windows package installs the AssurIQ collector as a native Windows service, supervised by the Service Control Manager and configured to start aut…

Overview A Network Intelligence Pack changes recommended overlays, VLAN/segment classification, documentation templates, deterministic risk rules and report e…

Overview What AssurIQ is, the FIND → UNDERSTAND → FIX → VALIDATE → PROVE → REPORT loop, and how the product areas fit together. Documentation status This ar…

Purpose The Microsoft 365 / Entra ID integration is the primary identity evidence source in AssurIQ. It powers privileged account inventory, MFA coverage, con…

Purpose The AWS connector assumes a read-only cross-account IAM role to inventory EC2 instances, security groups, IAM configuration and public exposure across…

Overview The AssurIQ collector is an outbound-only agent. It initiates every connection to the AssurIQ control plane over HTTPS/mTLS on port 443; the control…

Overview The VLAN & Subnet Explorer lists every VLAN and subnet observed at a site, with attached devices, switch port counts, gateways, risk and compliance s…

Overview Which data-protection and lifecycle controls are supported on supervised vs unsupervised iOS, fully managed, work-profile and dedicated Android — and…

Overview The ten-step guided incident: mark, assess, revoke sessions, lock, retire, rotate, validate, evidence, controls, report. Documentation status This…