Compliance
Signal-model focused view (not client-scoped).
Question to Signal Mapping
Demo Scenario: The Expanse simulation dataset is active. No live tenant data is being queried.
Mapping Summary

Questions in Scope

75

Dataset Signal Questions

62

Process/Narrative/Governance

13

Question Signal Matrix

Shows the platform signals used to answer each question. Filtering, sorting, and paging are handled by MudDataGrid.

Question Control
Signal Classification Signals Checked
A4.1
Do you have firewalls at the boundaries between your organisation's internal networks, laptops, desktops, servers, and the internet?
Host Firewall Enforcement
Dataset Signals
Answered using dataset telemetry and control evidence.
  • M365 (Authoritative) Intune firewall policy and compliance state provide direct control evidence.
  • NinjaOne (Supporting) Endpoint telemetry corroborates firewall runtime state and policy lock.
A4.1.1
Do you have software firewalls enabled on all of your computers, laptops and servers?
Host Firewall Enforcement
Dataset Signals
Answered using dataset telemetry and control evidence.
  • M365 (Authoritative) Intune firewall policy and compliance state provide direct control evidence.
  • NinjaOne (Supporting) Endpoint telemetry corroborates firewall runtime state and policy lock.
A4.1.2
If you answered no to question A4.1.1, is this because software firewalls are not installed by default as part of the operating system you are using?
Host Firewall Enforcement
Dataset Signals
Answered using dataset telemetry and control evidence.
  • M365 (Authoritative) Intune firewall policy and compliance state provide direct control evidence.
  • NinjaOne (Supporting) Endpoint telemetry corroborates firewall runtime state and policy lock.
A4.2
When you first receive an internet router or hardware firewall device, it may have had a default password on it. Have you changed all the default passwords on your boundary firewall devices?
Host Firewall Enforcement
Dataset Signals
Answered using dataset telemetry and control evidence.
  • M365 (Authoritative) Intune firewall policy and compliance state provide direct control evidence.
  • NinjaOne (Supporting) Endpoint telemetry corroborates firewall runtime state and policy lock.
A4.2.1
Please describe the process for changing your firewall password.
Host Firewall Enforcement
Dataset Signals
Answered using dataset telemetry and control evidence.
  • M365 (Authoritative) Intune firewall policy and compliance state provide direct control evidence.
  • NinjaOne (Supporting) Endpoint telemetry corroborates firewall runtime state and policy lock.
A4.3
How is your firewall password configured?
Host Firewall Enforcement
Dataset Signals
Answered using dataset telemetry and control evidence.
  • M365 (Authoritative) Intune firewall policy and compliance state provide direct control evidence.
  • NinjaOne (Supporting) Endpoint telemetry corroborates firewall runtime state and policy lock.
A4.4
Do you change your firewall password when you know or suspect it has been compromised?
Host Firewall Enforcement
Dataset Signals
Answered using dataset telemetry and control evidence.
  • M365 (Authoritative) Intune firewall policy and compliance state provide direct control evidence.
  • NinjaOne (Supporting) Endpoint telemetry corroborates firewall runtime state and policy lock.
A4.5
Do you have a process to manage your firewall?
Host Firewall Enforcement
Dataset Signals
Answered using dataset telemetry and control evidence.
  • M365 (Authoritative) Intune firewall policy and compliance state provide direct control evidence.
  • NinjaOne (Supporting) Endpoint telemetry corroborates firewall runtime state and policy lock.
A4.6
Have you reviewed your firewall rules in the last 12 months?
Host Firewall Enforcement
Dataset Signals
Answered using dataset telemetry and control evidence.
  • M365 (Authoritative) Intune firewall policy and compliance state provide direct control evidence.
  • NinjaOne (Supporting) Endpoint telemetry corroborates firewall runtime state and policy lock.
A4.7
Are host firewalls enabled and configured to block unauthorized inbound network connections on supported endpoints?
Host Firewall Enforcement
Dataset Signals
Answered using dataset telemetry and control evidence.
  • M365 (Authoritative) Intune firewall policy and compliance state provide direct control evidence.
  • NinjaOne (Supporting) Endpoint telemetry corroborates firewall runtime state and policy lock.
An unhandled error has occurred. Reload 🗙

Rejoining the server...

Rejoin failed... trying again in seconds.

Failed to rejoin.
Please retry or reload the page.

The session has been paused by the server.

Failed to resume the session.
Please retry or reload the page.