Shut these doors, in this order

Each door is one change, ordered by the exposure it removes and the certification requirements it completes per hour of work. Fixes interact, so the order is recalculated after every one.

Now · 5.5 hours

Next 30 days · 17 hours

−0.6 exposure2 hoursDEV-002
A lost or stolen unencrypted laptop is a reportable personal-data breach under UK GDPR. Encryption turns it into a hardware loss.
1. Intune admin centre > Endpoint security > Disk encryption: create a BitLocker (Windows) / FileVault (macOS) policy.
2. Assign it to all devices and escrow recovery keys to Entra ID / Intune.
3. Add 'Require encryption' to your compliance policies so drift is detected.
CompletesA.8.1A.8.24

Next 90 days · 7 hours

Shut these doors, in this order

Each door is one change, ordered by the exposure it removes and the certification requirements it completes per hour of work. Fixes interact, so the order is recalculated after every one.

Now · 5.5 hours

Next 30 days · 17 hours

−0.6 exposure2 hoursDEV-002
A lost or stolen unencrypted laptop is a reportable personal-data breach under UK GDPR. Encryption turns it into a hardware loss.
1. Intune admin centre > Endpoint security > Disk encryption: create a BitLocker (Windows) / FileVault (macOS) policy.
2. Assign it to all devices and escrow recovery keys to Entra ID / Intune.
3. Add 'Require encryption' to your compliance policies so drift is detected.
CompletesA.8.1A.8.24