01 /Enrollment & inventory
Review Intune enrollment, device ownership, management coverage, and the devices that fall outside your inventory.
02 /Configuration & compliance
Assess configuration profiles, compliance policies, firewall settings, and how device health affects access.
03 /Encryption & recovery
Review BitLocker coverage, recovery-key storage, access to keys, and practical recovery procedures.
04 /Endpoint protection
Examine Microsoft Defender onboarding, protection settings, alerts, and the process for investigating a device incident.
05 /Patching & applications
Review update policies, deployment rings, application delivery, local administrator access, and exceptions that need ownership.
06 /Device lifecycle
Improve onboarding, replacement, offboarding, and retirement procedures, including authorized wipe and data-handling processes.