Search documentation

…rity of the vulnerability itself Baseline signal for potential impact EPSS Probability of exploitation in the next 30 days Distinguishes theoretical risk from active threat KEV Whe…

…atus This article is a concise reference. A fully expanded guide for “EPSS” is scheduled in the documentation roadmap; the steps below are accurate for the current product version.…

Overview Accepting residual risk with an owner, expiry and review. Documentation status This article is a concise reference. A fully expanded guide for “Ris…

Purpose The Defender for Endpoint connector pulls device risk score, vulnerability, EDR alert and onboarding status via the Microsoft Graph Security API, feed…

Overview Trusted, At risk, Noncompliant, Unknown, Blocked: how signals (OS, patch level, encryption, passcode, integrity, check-in, data-protection policy, ap…

Overview AIQ-CMP-001 is an informational marker, not an error: it fires whenever a framework's assurance percentage changes since it was last viewed. It exist…

Overview What AssurIQ is, the FIND → UNDERSTAND → FIX → VALIDATE → PROVE → REPORT loop, and how the product areas fit together. Documentation status This ar…

Overview Run the first vulnerability, exposure and identity assessment and read the results correctly. Documentation status This article is a concise refere…

Overview Known Exploited Vulnerabilities catalogue, due dates and the KEV-on-the-edge storyline. Documentation status This article is a concise reference. A…

Overview Difference between an approved control exception and a suppressed finding. Documentation status This article is a concise reference. A fully expand…

Overview Executive reports summarize risk, assurance and operational trends in language a non-technical stakeholder can act on. Report Studio builds these fro…

Overview Query findings with risk factors and status transitions. Documentation status This article is a concise reference. A fully expanded guide for “Find…

Overview The FTC Safeguards Rule sets information security expectations for entities the FTC treats as financial institutions, based on the activities they pe…

Purpose The Microsoft 365 / Entra ID integration is the primary identity evidence source in AssurIQ. It powers privileged account inventory, MFA coverage, con…

Overview The HIPAA Security Rule requires covered entities and their business associates to protect the confidentiality, integrity and availability of electro…

Overview Enable frameworks, review applicability and read your first assurance scores. Documentation status This article is a concise reference. A fully exp…

Overview How evidence quality, freshness and source produce the confidence score. Documentation status This article is a concise reference. A fully expanded…

What it is AssurIQ Documentation is a per-customer workspace of structured records (organization, sites, contacts, network, firewalls, VLANs, servers, cloud t…

Overview Every control AssurIQ tracks sits in exactly one of six states at any point in time. These states are deliberately precise so a report never has to g…

Overview AssurIQ does not maintain a separate checklist per regulation or standard. Instead, it maintains a single set of universal controls — the actual secu…

Purpose The CrowdStrike Falcon connector uses the Falcon OAuth2 API with read-only scopes to collect host sensor health, detection and vulnerability exposure…

Overview The VLAN & Subnet Explorer lists every VLAN and subnet observed at a site, with attached devices, switch port counts, gateways, risk and compliance s…

Overview A Network Intelligence Pack changes recommended overlays, VLAN/segment classification, documentation templates, deterministic risk rules and report e…

Overview The Live Network Map renders the same underlying graph in three layers: L1 (physical adjacency), L2 (VLAN/switching) and L3 (routed subnets), plus a…

Overview Every generated documentation section records Last Verified, the AssurIQ data source(s) it was drawn from, a confidence score, and a staleness warnin…