Skip to main content
This category contains 1 automated control definitions and 3 manual checks across the sources named below. Similar controls from different standards are listed separately because names, thresholds or severity can differ. Whether the seeded Alignr Baseline is available depends on how your workspace was provisioned. Library templates are copied as disabled drafts. See Choose a baseline before enabling anything.

​
Automated controls

Expand a control to see the exact population, expectation and defaults. A pass requires usable evidence for the selected population. A known contrary observation can prove failure; missing observations or an empty population must not become a pass.
Each selected device should report that no firmware update is available.Part of BIOS Network Health.Applies toSubjects with a recorded firmware update available observation.What the result tells youNo reported update is not proof of supported firmware or full device hardening. An available update still needs risk review and scheduling.

​
Manual checks

These are human reviews, not automated evidence. The interval below is the template default; review ownership, evidence and suitability for the client.
Review every 30 days · BIOS Network HealthCheck the firewall, switches and access points against the approved network inventory. Record missing or offline devices and confirm the source population excludes endpoints and unrelated resources.Record: who performed the review, when it was performed, the evidence, the conclusion and any follow-up or approved exception. A due review is not evidence of a completed review.
Review every 30 days · BIOS Network HealthReview rules, management exposure, logging, subscriptions and approved exceptions. Current connector facts do not prove the full configuration baseline.Record: who performed the review, when it was performed, the evidence, the conclusion and any follow-up or approved exception. A due review is not evidence of a completed review.
Review every 90 days · BIOS Network HealthConfirm a current configuration backup exists and perform the documented recovery validation. Firmware inventory does not prove backup recoverability.Record: who performed the review, when it was performed, the evidence, the conclusion and any follow-up or approved exception. A due review is not evidence of a completed review.

​
Investigate a result

Confirm the client and the account, device or other item being assessed. Check the source, observation time and effective settings, then compare the recorded evidence with the expectation. Missing evidence needs investigation; a change to the environment requires a separate review.

​
Next steps

Create a custom control · Parameters and client overrides · Record a manual check