Skip to main content
Open Cloud > Posture > Current Posture to review synced Microsoft 365 management and security information from CIPP. This view is separate from Microsoft Secure Score and Google’s calculated checks. This guide is for company users with Microsoft 365 read access and for MSP staff.

​
Before you start

  • Your role has Microsoft 365 read access.
  • Your MSP has turned on the CIPP feature, connected CIPP, mapped the company and synced data. See Configure the CIPP integration. Company users ask their MSP to manage access and connections.

​
Open your company’s posture

1

Open Current Posture

Go to Cloud > Posture and choose Current Posture. If you do not see it, the CIPP feature or integration is not available for you.
2

Select one company

Pick one company in the top bar. With Global View or several companies selected, the page shows Select a company instead of scorecards.
3

Expand the scorecards

Open Your Microsoft 365 posture if it is collapsed.
4

Read the measures

Read the five headline measures and their metrics, then review Items needing attention.
5

Check the dates

Read Data as of and each finding’s timestamps before you decide what needs follow-up.
Current Posture never combines several companies into one scorecard, and company users only see their own company. An empty-data message is different from a successful check with no findings.

​
Understand the five areas

Each headline shows one metric, not a combined grade for every metric in that area. Coverage shows counts and a rounded percentage, such as 17 of 18 · 94%. A metric with unavailable evidence or no usable coverage denominator shows No data yet; its headline can show a dash. Colors are display thresholds. Coverage is green from 75%, yellow from 50%, orange from 25% and red below that. Exception counts are green at zero. Unused-account and external-forwarding counts show yellow for one or two, and most other nonzero exception counts show red. Informational counts carry no health color. Green does not mean perfect coverage or no security issues.

​
Interpret what was counted

  • MFA coverage uses active, licensed member accounts and the supplied registration, per-user MFA, Security Defaults or enforced Conditional Access signals. It is not proof that every sign-in was challenged. The admin metric uses a different scope, so the counts need not match.
  • Domain protection requires stored SPF pass, DKIM enabled and DMARC present signals together, excluding onmicrosoft.com domains. It does not establish the strength of every policy.
  • Device compliance uses the stored compliance status. Device counts depend on collected CIPP datasets, not every possible endpoint inventory.
  • External forwarding checks the destination against known company Microsoft domains, as well as the provider signal. An unexpected result can need domain/mapping review.
  • Incidents and alerts use the stored status. Other count labels describe collected records; a standards or policy count does not prove every item is correctly enforced. These are not live monitoring totals or a guaranteed fixed reporting period.
Data as of is the latest stored sync time. Datasets can refresh at different times, and a partial sync can leave a count with incomplete evidence. Ask your MSP about missing or surprising values. An empty list or a zero does not mean no incident happened. Findings an MSP has reviewed are left out of the overview calculations. For coverage metrics that changes both the numerator and the denominator, so a percentage can change without any Microsoft setting changing.

​
Follow up

Company users start with the Home AI Assistant. Include the company, the metric or finding, the timestamps and your concern. MSP staff should check the source before they review a finding or change a setting.

​
Troubleshooting

​
Frequently asked questions

Open Cloud > Posture > Current Posture when the CIPP feature and integration make it available. Select one company.
No. The current page requires one selected company. Global or multi-company scope shows Select a company.
No. Current Posture uses CIPP management and security datasets. Microsoft Secure Score and Google calculated checks are separate views.
No. Each area has one designated headline metric. Read its other metrics separately.
No. Green starts at 75% in the current display thresholds. Read the numerator, denominator and actual evidence.
No. It is the latest relevant stored timestamp. Datasets can have different ages or incomplete coverage.
Reviewed resources are excluded from calculations, which can change the numerator and denominator. Review does not itself change Microsoft configuration.
No. It means the metric has no usable evidence or coverage denominator. Ask the MSP to check the source and synchronization.
No. Counts reflect stored, scoped data and review exclusions. Confirm the relevant time period and source coverage with the MSP.
Ask the MSP to manage integration setup and permissions. Start with the Home AI Assistant if you need help with a finding.