Skip to main content
This page is for MSP staff.

Before you start

  • You need the read_settings_playbooks permission to browse the library.
  • You need the manage_settings_playbooks permission and an active billing account to import. Without it, the Add buttons and checkboxes are disabled or hidden.
  • Company users do not see this library.
  • Your tenant needs at least one status list. The import dialog asks for one for every playbook. Device playbooks can also use your device types.

Find a playbook

1

Open Settings > Compliance > Playbooks

The page shows two cards, Best Practices and Security Frameworks.
The Playbooks home page with the Best Practices and Security Frameworks cards

The Playbooks home page with the Best Practices and Security Frameworks cards.

2

Choose a path

Click Best Practices for broad operational and technology reviews. Click Security Frameworks for framework families such as CIS Benchmarks, CAN/DGSI 104, NIS2, NIST CSF 2.0 and Cyber Essentials.
3

Or search everything

Type in Search all playbooks… on the home page. The results list every matching playbook as a card. Click the clear button in the search box to go back to the two cards.
4

Go back

Use the back arrow in the page header to return to the previous level.

Review a playbook before importing

1

Open the details

Click the playbook’s name on its card. On a CIS Benchmarks card, click the eye button next to the L1, L2 or Full row instead.
2

Read the checks

The details window is read-only. It shows the playbook’s name, description, category, version and check list.
3

Close it

Click Cancel.
The Copy button in the details window closes the details and opens Add Playbooks to Tenant for that playbook. It works like Add on the card, so you choose the folder, status list and device types before anything is imported. Copy is disabled without manage access to Playbooks.

Import one or several playbooks

1

Pick the playbooks

Click Add on one card. To import several at once, tick the checkbox on each card, then click Add to Tenant in the page header. The header button shows the count, such as Add to Tenant (3).
2

Check the folder

In Add Playbooks to Tenant, find Folder: under each playbook. This is where the checks land in Compliance.
3

Choose a status list

Pick a Status list for each playbook. Your default status list is preselected when you have one. Check that its answer choices fit the playbook’s checks.
4

Set device types (Device playbooks only)

In Device types, review the preselected types tagged Suggested. Remove a type with the x on its tag, or click Clear to remove all of them. Selected device types receive the imported check group automatically.
5

Check for playbooks already imported

A playbook you already imported shows the note Already in your tenant. Importing again adds only the checks that are missing and keeps your existing checks unchanged. It does not create a second copy.
6

Import

Click Add to Tenant. A message names the folder that holds the new checks. Click Cancel instead to close the dialog without importing.
7

Check the result

Open Settings > Compliance > Checks and look in the folder the message named. Open Settings > Compliance > Groups to see the new group.

What an import does

  • It creates one check group named after the playbook.
  • It copies the playbook’s checks into the folder shown in the dialog, using the status list you chose.
  • It links the group to the device types you selected.
  • It does not change settings on any endpoint, start an assessment or assign checks to a company.
An Imported badge means the tenant already holds checks from that playbook. Importing it again reuses the existing group and adds only checks the tenant does not already have, such as checks added to the catalog since the first import. It does not overwrite checks you edited. Retrying after a failure is safe for the same reason: playbooks that already imported are not copied twice.

Edit imported checks

1

Open Settings > Compliance > Checks

Find the imported checks in the folder named in the import message.
2

Edit the checks

Change guidance, status list or other details. See Compliance settings.
3

Review the group

Open Groups to check the group and its checks before adding it to a run.
Importing a newer catalog version does not update your earlier copies. For CIS profiles, see Adding CIS Benchmarks. For NIS2, see Adding NIS2 playbooks. For AI Readiness and its dashboard block, see Track AI Readiness on a dashboard. To assess the checks, see the Compliance guide.

Troubleshooting

Frequently asked questions

No. Add on a card opens Add Playbooks to Tenant. The import happens when you click Add to Tenant in that dialog.
It does not import anything by itself. Copy closes the details window and opens Add Playbooks to Tenant for that playbook, the same as Add on the card. Choose the status list and, for device playbooks, the device types, then click Add to Tenant to import. Copy is disabled without manage access to Playbooks.
No. It adds checks and a group to your tenant library. Company assessments and run assignments are separate.
No. Importing the same playbook again reuses its group and adds only missing checks; existing checks keep your edits.
No. Each selected device type receives the imported group.
Yes. Tick each card’s checkbox and click Add to Tenant in the page header. Each playbook gets its own status list and folder.