Compliance policies and Conditional Access
How Intune compliance works end to end, from per-platform settings, the built-in default policy, grace periods and custom compliance through the Entra device object to a Conditional Access grant that requires a compliant device or an app protection policy, plus the MDE risk signal and how to unblock a user.
Secure Score, recommendations, governance and regulatory compliance
How the classic secure score is weighted per control and subscription, how the risk-based Cloud Secure Score differs, what recommendations, exemptions and governance rules do to the number, how the regulatory compliance dashboard and its standards work, and how to pull all of it out with Resource Graph, REST, workbooks and Power BI for a client posture engagement.