Control recipes - Alignr

A good control recipe starts with one question and finishes with evidence you can explain. Use these recipes after the first-client journey, or jump straight to the expectation you need.

Recipe	Question	Start here
Endpoint encryption	Do MDM-enrolled devices report encryption enabled?	Build the encryption control.
Vulnerability threshold	Is the observed open-finding count within an agreed limit?	Build a configurable count check.
Administrator MFA	Do observed Global Administrators have MFA registered?	Follow the identity assessment.
Backup and recovery	What do protection, job status, recency and a restore test each establish?	Assess backup and recovery.

Read a recipe in four parts

Scope: which clients and subjects are assessed?
Condition: which observation is compared with which expectation?
Examples: what would satisfy, contradict or leave the question unanswered?
Limits: what requires another control or a manual review?

The simple control editor can create an observation-based population and a single expectation. Exact population values and additional filters require an appropriate built-in definition or an advanced definition.

Before enabling a recipe

Confirm source coverage, inspect an editable draft, review client settings and test the result cases. Sample thresholds are starting points to discuss, not a recommended policy for every client.

⌘I