Account Protection Workspace
Record controls and decisions with evidence. Define scope and do not enter account secrets or personal evidence.
Control and evidence evaluation
0 / 8 assessed · 0 / 16 implementation scoreRecord each check with its application status and evidence reference. The score is not a security certification; Blank checks are not considered complete.
MFA and passkey
Anti-phishing MFA/passkey is used on critical and administrative accounts.
Get policy output and coverage report from identity provider.Privileged access
Administrator accounts are separate from daily accounts; Minimum authorization and limited access are applied.
Review role assignments, emergency access accounts, and approval processes.life cycle
Job entry, job change and departure processes trigger access updates.
Verify the deactivation time for the last three departures.Session and device
Compromised login, outdated authentication, and unmanaged device access are restricted.
Document conditional access rules and exceptions.recovery
Rescue contact information, backup codes and emergency access procedure are kept under control.
Do not enter backup codes here; only record the test date of the procedure.App permissions
OAuth applications, service accounts and API keys are reviewed regularly.
Remove unnecessary confirmations; Save key rotation and scope constraints.Monitoring
Identity provider logs are transferred to the central system; Risky session warnings are being reviewed.
Verify collection, storage and alert owners.review
Access is periodically re-approved by asset owners.
Keep records of approval dates, exceptions, and closed access.Priority improvements
Missing and partial checks are listed here as the evaluation progresses.
Study and report
Study data is kept on this page. You can save it in your browser with the “Save on this device” option.
Live queries go to the external target; The save and report file is personal study data. Review content before sharing.
Questions and limits
Does this page guarantee security?
No. Guidance and tool results are limited to their stated scope. Verify impact in your own environment.
