Search documentation

Overview Every control AssurIQ tracks sits in exactly one of six states at any point in time. These states are deliberately p…

Overview Framework coverage, control states and exceptions. Documentation status This article is a concise reference. A fully expanded gu…

…gulation or standard. Instead, it maintains a single set of universal controls — the actual security practices that matter, such as MFA enforcement, patch cadence, endpoint protect…

…the platform doing its job. Common causes A new finding pushed a control from PASS to PARTIAL or FAIL. Evidence for a control went stale past its cadence, moving it toward EVI…

…llectors and connectors produce evidence on a cadence; results update control states automatically. Every state change is recorded as an append-only observation. Next steps Use…

Overview How one artifact proves multiple controls and frameworks. Documentation status This article is a concise reference. A fully expanded guide fo…

…ssurIQ assesses business-owned iOS, iPadOS and Android devices: trust states, posture signals, cloud access graph and what each platform can actually enforce. Documentation statu…

Overview Read control results and post manual evidence. Documentation status This article is a concise reference. A fully…

Overview Each collector reports a heartbeat every 60 seconds. The control plane derives a single health state from the heartbeat history, reported metrics, credential status an…

…llectors and connectors produce evidence on a cadence; results update control states automatically. Every state change is recorded as an append-only observation. Next steps Use…

…al report to the board or governing body at least annually. AssurIQ control mapping Program element Representative AssurIQ controls Qualified individual / governance AIQ-GV-001…

Overview Mapping strength, one-control-many-requirements leverage and coverage math. Documentation status This article is a concise referen…

Purpose The Aruba integration polls Aruba switches, controllers and Aruba Central-managed access points to collect VLAN, wireless client and configuration evidenc…

…soft Graph Security API, feeding endpoint vulnerability and detection controls alongside the Microsoft 365 identity connector. Requirements Microsoft Defender for Endpoint Plan…

…in-joined Windows host or the AssurIQ collector reachable to a domain controller A dedicated read-only service account (no interactive logon rights needed) LDAP/LDAPS (389/636) rea…

Purpose The UniFi connector reads controller (UniFi Network Application or UniFi OS Console) inventory, client, VLAN and firmware state so Assur…

…public IP exposure, feeding cloud asset, patching and attack-surface controls. Requirements An Azure subscription with Entra ID app registration and service principal creation…

…llectors and connectors produce evidence on a cadence; results update control states automatically. Every state change is recorded as an append-only observation. Next steps Use…

…y Business importance of the affected asset The same flaw on a domain controller outweighs the same flaw on a print server Mitigations Compensating controls already in place (WAF,…

…urIQ collector as a native Windows service, supervised by the Service Control Manager and configured to start automatically on boot. Windows ARM64 is on the roadmap and not yet…

…ation, contingency planning and business associate oversight Physical Control over physical access to facilities and devices that hold ePHI, plus device and media disposal Technica…

…llectors and connectors produce evidence on a cadence; results update control states automatically. Every state change is recorded as an append-only observation. Next steps Use…

…prevention, App-ID and firmware evidence, including Panorama-managed estates. Requirements PAN-OS 10.x+ (firewall or Panorama) with API access enabled A read-only administrator…

Overview Which data-protection and lifecycle controls are supported on supervised vs unsupervised iOS, fully managed, work-profile and dedicated Android —…

…k, assess, revoke sessions, lock, retire, rotate, validate, evidence, controls, report. Documentation status This article is a concise reference. A fully expanded guide for “Lost…

Overview Difference between an approved control exception and a suppressed finding. Documentation status This article is a concise reference. A full…

Overview Controls insurers most commonly attest and how to prove them. Documentation status This article is a concise…

Overview Marking controls not applicable, scoping by site or system class. Documentation status This article is a concise ref…

Overview Reading control history: PARTIAL → PASS storylines and confidence over time. Documentation status This article is a…

Overview How jobs prove the fix worked and update control state. Documentation status This article is a concise reference. A fully expanded guide for “Validat…