Search documentation

Overview AIQ-CMP-001 is an informational marker, not an error: it fires whenever a framework's assurance percentage changes since it was last viewed. It exist…

…s article is a concise reference. A fully expanded guide for “Initial Compliance Assessment” is scheduled in the documentation roadmap; the steps below are accurate for the current…

…atus This article is a concise reference. A fully expanded guide for “Compliance Reports” is scheduled in the documentation roadmap; the steps below are accurate for the current pr…

…tracks control operation; it does not issue a legal certification of compliance with any regulation, and a customer's use of the platform does not constitute a legal opinion or at…

…a site, with attached devices, switch port counts, gateways, risk and compliance scope. Segment classification (from the site's industry pack) is shown alongside, but never asserte…

Overview How evidence quality, freshness and source produce the confidence score. Documentation status This article is a concise reference. A fully expanded…

Overview Every control AssurIQ tracks sits in exactly one of six states at any point in time. These states are deliberately precise so a report never has to g…

Overview How one artifact proves multiple controls and frameworks. Documentation status This article is a concise reference. A fully expanded guide for “Lin…

Overview How AssurIQ assesses business-owned iOS, iPadOS and Android devices: trust states, posture signals, cloud access graph and what each platform can act…

…s framework, which is why Safeguards appears frequently in dealership compliance programs even though dealerships are not banks. Who it applies to Scope is activity-based. Comm…

Overview Mapping strength, one-control-many-requirements leverage and coverage math. Documentation status This article is a concise reference. A fully expan…

Overview Read control results and post manual evidence. Documentation status This article is a concise reference. A fully expanded guide for “Controls and E…

Overview Create a managed customer or a direct customer, choose frameworks and set the primary contact. Documentation status This article is a concise refer…

…Azure Policy or Azure Monitor read access for configuration and patch compliance evidence, where used Permissions Reader role at subscription or management group scope — read a…

Purpose The Defender for Endpoint connector pulls device risk score, vulnerability, EDR alert and onboarding status via the Microsoft Graph Security API, feed…

Overview CVSS scores describe how severe a vulnerability could theoretically be if exploited under worst-case conditions. It says nothing about whether that v…

Overview Versioned packs, upgrades and how history is preserved. Documentation status This article is a concise reference. A fully expanded guide for “Frame…

…ass. AssurIQ never automatically declares regulatory applicability or compliance.

…mentation purposes, not legal advice, and does not constitute a HIPAA compliance certification. Confirm covered-entity or business-associate status and full obligations with qualif…

Overview What AssurIQ is, the FIND → UNDERSTAND → FIX → VALIDATE → PROVE → REPORT loop, and how the product areas fit together. Documentation status This ar…

Purpose On-prem Active Directory integration reads domain user, group and Group Policy state through a lightweight collector-side query so AssurIQ can assess…

Purpose The UniFi connector reads controller (UniFi Network Application or UniFi OS Console) inventory, client, VLAN and firmware state so AssurIQ can assess…

Purpose The Aruba integration polls Aruba switches, controllers and Aruba Central-managed access points to collect VLAN, wireless client and configuration evi…

Overview The Windows package installs the AssurIQ collector as a native Windows service, supervised by the Service Control Manager and configured to start aut…

Overview Executive reports summarize risk, assurance and operational trends in language a non-technical stakeholder can act on. Report Studio builds these fro…

…unt access AWS Config or Security Hub enabled, optionally, for richer compliance evidence Permissions A managed policy equivalent to ReadOnlyAccess, or a scoped policy covering…

Purpose The Microsoft 365 / Entra ID integration is the primary identity evidence source in AssurIQ. It powers privileged account inventory, MFA coverage, con…

Overview The AssurIQ collector is an outbound-only agent. It initiates every connection to the AssurIQ control plane over HTTPS/mTLS on port 443; the control…

Overview Which data-protection and lifecycle controls are supported on supervised vs unsupervised iOS, fully managed, work-profile and dedicated Android — and…

Overview The ten-step guided incident: mark, assess, revoke sessions, lock, retire, rotate, validate, evidence, controls, report. Documentation status This…