Search documentation

…successful exploit would actually cause in your environment. AssurIQ Risk answers those questions directly instead of leaving them to a static severity number. A CVSS 9.8 vulne…

Overview Accepting residual risk with an owner, expiry and review. Documentation status This article is a concise reference. A fully exp…

…erview Exploit Prediction Scoring System and how it weights AssurIQ Risk. Documentation status This article is a concise reference. A fully expanded guide for “EPSS” is schedul…

Overview Trusted, At risk, Noncompliant, Unknown, Blocked: how signals (OS, patch level, encryption, passcode, integrity, check-in,…

Overview Query findings with risk factors and status transitions. Documentation status This article is a concise reference. A fully expan…

Purpose The Defender for Endpoint connector pulls device risk score, vulnerability, EDR alert and onboarding status via the Microsoft Graph Security API, feeding endpo…

Overview AIQ-CMP-001 is an informational marker, not an error: it fires whenever a framework's assurance percentage changes since it was last viewed. It exist…

Overview What AssurIQ is, the FIND → UNDERSTAND → FIX → VALIDATE → PROVE → REPORT loop, and how the product areas fit together. Documentation status This ar…

Overview Run the first vulnerability, exposure and identity assessment and read the results correctly. Documentation status This article is a concise refere…

Overview Known Exploited Vulnerabilities catalogue, due dates and the KEV-on-the-edge storyline. Documentation status This article is a concise reference. A…

Overview Difference between an approved control exception and a suppressed finding. Documentation status This article is a concise reference. A fully expand…

Overview Executive reports summarize risk, assurance and operational trends in language a non-technical stakeholder can act on. Report Studio build…

…l responsible for the information security program. Perform a written risk assessment covering the confidentiality, integrity and availability of customer information. Design and i…

…vileged account detection SecurityEvents.Read.All Identity Protection risk detections, where licensed Admin consent required These are application permissions, which require tena…

…Category Summary Administrative Governance of the security program: risk analysis, workforce training, access authorization, contingency planning and business associate oversight…

Overview Enable frameworks, review applicability and read your first assurance scores. Documentation status This article is a concise reference. A fully exp…

Overview How evidence quality, freshness and source produce the confidence score. Documentation status This article is a concise reference. A fully expanded…

…class, site or environment EXCEPTION A documented, owned, time-bound risk acceptance overrides the raw evaluation How states change States change automatically as new evidence…

What it is AssurIQ Documentation is a per-customer workspace of structured records (organization, sites, contacts, network, firewalls, VLANs, servers, cloud t…

…asset class, or environment EXCEPTION A documented, owned, time-bound risk acceptance overrides the raw evaluation Why EVIDENCE GAP is not FAIL EVIDENCE GAP means AssurIQ has…

…lnerability exposure (Spotlight), where licensed Falcon-assigned host risk indicators Security model The API client is restricted to Read-only scopes and cannot trigger contain…

…erved at a site, with attached devices, switch port counts, gateways, risk and compliance scope. Segment classification (from the site's industry pack) is shown alongside, but neve…

…, VLAN/segment classification, documentation templates, deterministic risk rules and report emphasis for a customer's industry — without adding a separate application. Packs are au…

Overview The Live Network Map renders the same underlying graph in three layers: L1 (physical adjacency), L2 (VLAN/switching) and L3 (routed subnets), plus a…

Overview Every generated documentation section records Last Verified, the AssurIQ data source(s) it was drawn from, a confidence score, and a staleness warnin…