Cq
Claritiq
·
E - CA Policies
Critical
Caution
Healthy · target
Scope: eni.enigron.com · c1.eni.enigron.com
Total policies
27
across 6 categories
Enabled
21
77.8%
Report-only
4
≥ 30d in this state
Disabled
2
review intent
Overlap pairs
3
redundant rules
MFA gap users
47
not covered by any MFA-required policy
Policies × state
| Category | Enabled | Report-only | Disabled | Total |
|---|---|---|---|---|
| MFA enforcement | 8 | 1 | 0 | 9 |
| Block legacy auth | 3 | 0 | 0 | 3 |
| Device compliance | 4 | 1 | 1 | 6 |
| Risk-based sign-in | 2 | 1 | 0 | 3 |
| Privileged role guard | 3 | 0 | 0 | 3 |
| Location filter | 1 | 1 | 1 | 3 |
Overlap & gap findings
| Finding | Affected | Severity |
|---|---|---|
| Overlap: 'MFA-AllUsers' + 'MFA-AllApps' | (both) | Caution |
| Overlap: 'Block-Legacy-Outlook' + 'Block-Legacy-EWS' | (both) | Caution |
| Gap: 47 users not covered by MFA-required | 47 | Critical |
| Stale: 4 policies in report-only > 30d | 4 | Caution |
| Stale: 2 disabled policies (no recent edits) | 2 | Caution |
CA policy overlap creates evaluation noise; gaps create exposure. Quarterly access-review export should include this matrix.