Question Mapping

Compliance

Signal-model focused view (not client-scoped).

Question to Signal Mapping

Mapping Summary

Questions in Scope

75

Dataset Signal Questions

62

Process/Narrative/Governance

13

Question Signal Matrix

Shows the platform signals used to answer each question. Filtering, sorting, and paging are handled by MudDataGrid.

Question	Control0	Signal Classification	Signals Checked
A5.2 Are systems and identities configured to an approved secure baseline with unnecessary features disabled?	Secure Configuration Baseline	Dataset Signals Answered using dataset telemetry and control evidence.	M365 (Authoritative) Cloud identity and endpoint baseline posture is governed through M365 security controls. NinjaOne (Supporting) Endpoint configuration drift checks corroborate baseline adherence.
A5.3 Have you changed the default password for all user and administrator accounts on all your desktop computers, laptops, thin clients, servers, tablets and mobile phones?	Secure Configuration Baseline	Dataset Signals Answered using dataset telemetry and control evidence.	M365 (Authoritative) Cloud identity and endpoint baseline posture is governed through M365 security controls. NinjaOne (Supporting) Endpoint configuration drift checks corroborate baseline adherence.
A5.4 Do you run or host external services that provide access to data (that should not be made public) to users across the internet?	Secure Configuration Baseline	Dataset Signals Answered using dataset telemetry and control evidence.	M365 (Authoritative) Cloud identity and endpoint baseline posture is governed through M365 security controls. NinjaOne (Supporting) Endpoint configuration drift checks corroborate baseline adherence.
A5.5 If yes to question A5.4, which authentication option do you use?	Secure Configuration Baseline	Dataset Signals Answered using dataset telemetry and control evidence.	M365 (Authoritative) Cloud identity and endpoint baseline posture is governed through M365 security controls. NinjaOne (Supporting) Endpoint configuration drift checks corroborate baseline adherence.
A5.6 Describe the process in place for changing passwords on your external services when you believe they have been compromised.	Secure Configuration Baseline	Dataset Signals Answered using dataset telemetry and control evidence.	M365 (Authoritative) Cloud identity and endpoint baseline posture is governed through M365 security controls. NinjaOne (Supporting) Endpoint configuration drift checks corroborate baseline adherence.
A5.7 When not using multi-factor authentication, which option are you using to protect your external service from brute force attacks?	Secure Configuration Baseline	Dataset Signals Answered using dataset telemetry and control evidence.	M365 (Authoritative) Cloud identity and endpoint baseline posture is governed through M365 security controls. NinjaOne (Supporting) Endpoint configuration drift checks corroborate baseline adherence.
A5.8 Have you disabled any feature which allows automatic file execution of downloaded or imported files without user authorisation?	Secure Configuration Baseline	Dataset Signals Answered using dataset telemetry and control evidence.	M365 (Authoritative) Cloud identity and endpoint baseline posture is governed through M365 security controls. NinjaOne (Supporting) Endpoint configuration drift checks corroborate baseline adherence.
A5.9 When a device requires a user to be present, do you set a locking mechanism on your devices to access the software and services installed?	Secure Configuration Baseline	Dataset Signals Answered using dataset telemetry and control evidence.	M365 (Authoritative) Cloud identity and endpoint baseline posture is governed through M365 security controls. NinjaOne (Supporting) Endpoint configuration drift checks corroborate baseline adherence.

An unhandled error has occurred. Reload 🗙