Compliance
Signal-model focused view (not client-scoped).
Question to Signal Mapping
Demo Scenario: The Expanse simulation dataset is active. No live tenant data is being queried.
Mapping Summary

Questions in Scope

75

Dataset Signal Questions

62

Process/Narrative/Governance

13

Question Signal Matrix

Shows the platform signals used to answer each question. Filtering, sorting, and paging are handled by MudDataGrid.

Question Control
Signal Classification Signals Checked
A6.1
Are all operating systems on your devices supported by a vendor that produces regular security updates and vulnerability fixes?
Security Update Currency
Dataset Signals
Answered using dataset telemetry and control evidence.
  • M365 (Authoritative) Intune update compliance provides patch deployment timeliness evidence.
  • HaloPSA (Supporting) SLA and remediation workflow records evidence operational follow-through.
  • NinjaOne (Supporting) Endpoint patch telemetry corroborates device-level update currency.
A6.2
Is all the software on your devices supported by a supplier that produces regular vulnerability fixes for any security problems?
Security Update Currency
Dataset Signals
Answered using dataset telemetry and control evidence.
  • M365 (Authoritative) Intune update compliance provides patch deployment timeliness evidence.
  • HaloPSA (Supporting) SLA and remediation workflow records evidence operational follow-through.
  • NinjaOne (Supporting) Endpoint patch telemetry corroborates device-level update currency.
A6.2.1
Please list your internet browser(s).
Security Update Currency
Dataset Signals
Answered using dataset telemetry and control evidence.
  • M365 (Authoritative) Intune update compliance provides patch deployment timeliness evidence.
  • HaloPSA (Supporting) SLA and remediation workflow records evidence operational follow-through.
  • NinjaOne (Supporting) Endpoint patch telemetry corroborates device-level update currency.
A6.2.2
Please list your malware protection software.
Security Update Currency
Dataset Signals
Answered using dataset telemetry and control evidence.
  • M365 (Authoritative) Intune update compliance provides patch deployment timeliness evidence.
  • HaloPSA (Supporting) SLA and remediation workflow records evidence operational follow-through.
  • NinjaOne (Supporting) Endpoint patch telemetry corroborates device-level update currency.
A6.2.3
Please list your email applications installed on end user devices and servers.
Security Update Currency
Dataset Signals
Answered using dataset telemetry and control evidence.
  • M365 (Authoritative) Intune update compliance provides patch deployment timeliness evidence.
  • HaloPSA (Supporting) SLA and remediation workflow records evidence operational follow-through.
  • NinjaOne (Supporting) Endpoint patch telemetry corroborates device-level update currency.
A6.2.4
Please list all office applications that are used to create organisational data.
Security Update Currency
Dataset Signals
Answered using dataset telemetry and control evidence.
  • M365 (Authoritative) Intune update compliance provides patch deployment timeliness evidence.
  • HaloPSA (Supporting) SLA and remediation workflow records evidence operational follow-through.
  • NinjaOne (Supporting) Endpoint patch telemetry corroborates device-level update currency.
A6.4/A6.5
Are security updates applied within policy timelines for operating systems and applications?
Security Update Currency
Dataset Signals
Answered using dataset telemetry and control evidence.
  • M365 (Authoritative) Intune update compliance provides patch deployment timeliness evidence.
  • HaloPSA (Supporting) SLA and remediation workflow records evidence operational follow-through.
  • NinjaOne (Supporting) Endpoint patch telemetry corroborates device-level update currency.
A6.4.1
Are all updates applied for operating systems by enabling auto updates?
Security Update Currency
Dataset Signals
Answered using dataset telemetry and control evidence.
  • M365 (Authoritative) Intune update compliance provides patch deployment timeliness evidence.
  • HaloPSA (Supporting) SLA and remediation workflow records evidence operational follow-through.
  • NinjaOne (Supporting) Endpoint patch telemetry corroborates device-level update currency.
A6.4.2
Where auto updates are not being used, how do you ensure all high-risk or critical security updates and vulnerability fixes of all operating systems and firmware on firewalls and routers are applied within 14 days of release?
Security Update Currency
Dataset Signals
Answered using dataset telemetry and control evidence.
  • M365 (Authoritative) Intune update compliance provides patch deployment timeliness evidence.
  • HaloPSA (Supporting) SLA and remediation workflow records evidence operational follow-through.
  • NinjaOne (Supporting) Endpoint patch telemetry corroborates device-level update currency.
A6.5.1
Are all updates applied on your applications by enabling auto updates?
Security Update Currency
Dataset Signals
Answered using dataset telemetry and control evidence.
  • M365 (Authoritative) Intune update compliance provides patch deployment timeliness evidence.
  • HaloPSA (Supporting) SLA and remediation workflow records evidence operational follow-through.
  • NinjaOne (Supporting) Endpoint patch telemetry corroborates device-level update currency.
An unhandled error has occurred. Reload 🗙

Rejoining the server...

Rejoin failed... trying again in seconds.

Failed to rejoin.
Please retry or reload the page.

The session has been paused by the server.

Failed to resume the session.
Please retry or reload the page.