Tests authored
- MT.1187The Microsoft 365 traffic forwarding profile in Global Secure Access should be enabled.
- MT.1188Entra Private Access applications should be covered by a Conditional Access policy that requires a managed device.
- MT.1189Groups assigned to Global Secure Access traffic forwarding profiles should not be nested.
- MT.1190Entra Private Access applications should not use the Default connector group.
- MT.1191Break-glass accounts should be excluded from the Compliant Network Conditional Access policy.
- MT.1192Groups assigned to Entra Private Access applications should not be nested.
- MT.1193Entra Private Access application segments should avoid broad or risky destinations.
- MT.1194The baseline Global Secure Access security profile should enforce a threat-intelligence floor.
- MT.1195The Quick Access app should not be subject to a sign-in frequency Conditional Access control.