Before you start
- You need Standards settings Read permission to view the catalog. Creating, editing, deleting and syncing need Manage permission and an account in good billing standing. Company administrator access does not grant these MSP settings.
- The page is at Settings > MSP Tools > Standards. The older
/settings/tool-stackaddress redirects here. - Settings defines the shared catalog. The company deployment matrix is a separate page at MSP Tools > Standards.
- The page has four tabs. Setup is the guided setup described below. Standards is the catalog on this page. Plans is covered in Standards tiers and deployment options. Company Standards applicability is covered in Choose which Standards apply.
Guided setup and discovery
Open Settings > Standards > Setup, or the Standards phase in Launch Center. Both use the same discovery and setup workflow.- In Standards, choose Yes, look to read available agreement billing, software and product evidence. Nothing is created until you review the suggestions and choose Apply selected. You can also choose I’ll add them myself.
- Review suggested names, categories and whether each standard is required. Select only the standards you want to create, then wait for the saved result.
- Under Anything else?, select Chat about my standards when the assistant is available. Tell it about tools, services or standards that were missed. Use the product choices and review steps below before saving proposed changes.
- In Plans and Add-ons, describe your service packages, or answer that you do not use them.
- In Billing, choose whether a plan is identified by one billed SKU, several SKUs or no billing match. Map the relevant products.
- Review Plan contents, choose Detection evidence for each standard, and link plans to Company types when applicable.
- In Review, compare what clients should have with what they have. Correct the underlying plan or detection settings before finishing.

Review suggested standards before applying them.
View discovery on a phone
View discovery on a phone

Choose products in the standards chat
For a broad statement such as “we use the Fortinet stack” or “we use Sophos products,” the assistant asks which product families you want to include. The cards start unchecked and briefly explain each product’s purpose.- Select the products you use and want to include. The choices are suggestions; name any missing products in chat. You do not need pricing to select products.
- Select Review selected products to send your choices to the conversation. This answers the assistant’s question and does not save standards.
- Tell the assistant whether each selected product is required for every client or optional. If you have not already confirmed this, it asks before preparing changes.
- Review the separate proposal, including product names and required status. Select Apply only when it contains the standards you want to save.

Choose Fortinet product families before reviewing proposed standards.
View Sophos product choices on a phone
View Sophos product choices on a phone

Manage a plan’s standards and billing bundles
Open the Plans tab and select a plan’s standards count to open Manage [plan name].- Open Assigned standards and select the standards the plan includes. Shared standards are already selected because they apply to every base plan. Removing one from this plan keeps it assigned to the other existing plans.
- Select Apply, or close the picker to apply your selection. Wait for the saved result before closing the dialog. Removing a standard from its final plan is blocked with an explanation; an empty plan assignment would make it shared across all plans again.
- Under Billing bundles, choose a Product or agreement SKU, then open Standards covered by this SKU. Standards included in this plan are available. For add-ons, shared standards are also available for billing coverage even when unchecked under Assigned standards; linking a SKU does not assign the shared standard specifically to the add-on.
- A selected standard means the SKU covers every required billing group. A partial-coverage message identifies standards where the SKU covers only some groups; these remain unchecked. Select one and apply to link the SKU to every required group.

A test plan where the selected SKU covers only some of a standard's required billing groups.
View plan coverage on a phone
View plan coverage on a phone


A test add-on where billing covers a shared standard while Assigned standards remains empty.
Create a category
Open the catalog
Add the category
Rename it
Add a description and icon
Choose a Planner type
Add and edit a standard
Add the standard
Name it
Fill in the details
Reopen it later

The item editor: Details, Deployment options, Standards applicability and Answered by billing rows.
Apply a Planner template
Pick a template on a standard to set up its Planner items from the start, instead of applying a template to each item after sync creates it.Create the template
Choose it on the standard

The Planner template row in the standard's editor. Choose None to stop applying a template.
Sync
Change or remove a template
- Switch templates. On the next sync, open items drop the old template’s cost rows and get the new template. Cost rows added by hand stay. The new template’s compliance links are added; the old links stay.
- Choose None. On the next sync, the old template’s cost rows are removed. When no rows remain, the standard’s Default Price comes back. The description and type return to the standard’s; the other fields stay.
- Delete the template. The standard’s choice returns to None, but its items keep what the template gave them.
- Edit the template. Changes to a template’s contents are not re-applied to items that already have it. Only choosing a different template updates them.
Require one of a group
Use this for a category of alternatives, such as a company needing one suitable backup product from a group.Open the category details
Turn on the rule
Check the result
Organize the list
Collapse or expand categories
Reorder
Delete a category or standard
Click the trash icon on the category (Delete category) or the item (Delete item) and confirm. Deleting a category deletes its items. Deleting an item removes it from every company. If the item has linked Planner items, you must type its name to confirm, and those Planner items are deleted too. See Retire Standards definitions before you delete anything that companies already track.Understand automatic saving
There is no overall Save or Cancel button. Adding a category or item saves it immediately. Item fields save about half a second after you stop typing. Category names save when you press Enter or click out of the field, and category descriptions save when you click out of the box. An empty item name is never saved. Wait a moment before you leave the page. If a red error message appears, the change did not save, so reload the page and check the value. Closing the pencil popover or an item editor does not undo anything already saved. Saving the catalog does not change company Planner items. Review Sync Standards to companies before you click Sync All Companies.Detect standards from domain checks
This feature is off by default. An internal administrator enables Email domain security checks in Features for a tenant or a personal pilot. Until enabled, the email-security column, Check now, report block and Domain check choice are hidden. Turning it off stops new checks and hides stored DNS results without deleting them. Turning it off also hides stored domain signal rules, evidence and automatic answers immediately. Saving other detection rules preserves those hidden signal rules for when the feature is reenabled. In setup’s Detection step, choose Domain check and select the DMARC-enforced or safe-SPF signal. A company satisfies the rule when at least the configured minimum number of checked domains pass and no domain receiving mail fails that signal. A parked domain without MX records does not block the rule. One passing domain cannot hide another unprotected mail domain. A successful DNS measurement can prove a standard for 48 hours. Failed checks retain the historical result, but do not extend that window. Expired mail-domain evidence blocks the signal even if another domain passes. On its next read, the matrix hides expired proof, including after checks are reenabled; a successful recheck can restore it. DMARC enforcement means a quarantine or reject policy. Safe SPF requires one SPF record without a pass-all mechanism and with no more than ten DNS-lookup terms in that record. Billing evidence takes precedence over domain detection; integration evidence also takes precedence when both match. The matrix identifies an answer detected from domain checks. Request fresh DNS checks from the domain row menu (Check now) or, for several domains, Actions (N) > Check email security on Documentation > Domains or Cloud > Domains; Standards reevaluates the stored evidence on its scheduled run.Troubleshooting
Frequently asked questions
Where do I create or rename a standard?
Where do I create or rename a standard?
Can Company administrators edit this catalog?
Can Company administrators edit this catalog?
Does Add Category open an unsaved form?
Does Add Category open an unsaved form?
Can two items have the same name?
Can two items have the same name?
Does closing the editor discard my changes?
Does closing the editor discard my changes?
Does choosing a Planner type create work right away?
Does choosing a Planner type create work right away?
Are optional standards left out of sync?
Are optional standards left out of sync?
Is Default Price a monthly subscription price?
Is Default Price a monthly subscription price?
What does Require one of group do?
What does Require one of group do?
Does turning the group rule off restore Required?
Does turning the group rule off restore Required?
Can I drag an item to a different category?
Can I drag an item to a different category?
Where is Planner type on a phone?
Where is Planner type on a phone?
Does choosing a Planner template change items right away?
Does choosing a Planner template change items right away?
Are completed items updated when I change the template?
Are completed items updated when I change the template?
Why is the Planner template list empty?
Why is the Planner template list empty?
Do I need Planner access to choose a template?
Do I need Planner access to choose a template?
Does entering a vendor install or connect the product?
Does entering a vendor install or connect the product?
