Configuration & Change
Baseline compliance, drift, exceptions and change history — every entry traceable to an owning asset.
Estate compliance
19%on baseline
Drift by severity
- critical24
- warning24
- informational30
Exceptions
open
5
remediating
6
accepted
7
oldest exception
226d
Configuration exceptions (18)
Filter by severity, owner and age
| Exception | Control | Asset | Owner | Age | Status | Severity |
|---|---|---|---|---|---|---|
| CFG-700 | Least-privilege service accounts | Customer Master DB | S. Nakamura | 39d | open | warning |
| CFG-701 | Guardrail set attached to AI system | Virtualisation Cluster | S. Nakamura | 123d | remediating | warning |
| CFG-702 | Least-privilege service accounts | Email Security Gateway | C. Iversen | 145d | open | warning |
| CFG-703 | Secrets rotated within 90 days | Service Desk | E. Moreau | 23d | open | critical |
| CFG-704 | Least-privilege service accounts | Element Manager | T. Alvarez | 24d | accepted | informational |
| CFG-705 | Approved baseline patch level | Fraud Signal Summariser | L. Marchetti | 150d | remediating | warning |
| CFG-706 | MFA enforced for administrators | Identity Provider | S. Nakamura | 146d | open | warning |
| CFG-707 | Secrets rotated within 90 days | Endpoint Fleet | L. Marchetti | 111d | remediating | critical |
| CFG-708 | Secrets rotated within 90 days | Email Security Gateway | D. Okonkwo | 185d | accepted | critical |
| CFG-709 | No public ingress on data tier | Event Streaming Bus | E. Moreau | 225d | remediating | warning |
| CFG-710 | Approved baseline patch level | CRM Core | C. Iversen | 172d | open | informational |
| CFG-711 | Guardrail set attached to AI system | Event Streaming Bus | M. Haddad | 77d | accepted | warning |
| CFG-712 | Secrets rotated within 90 days | Document Store | M. Haddad | 89d | accepted | warning |
| CFG-713 | Log retention ≥ 365 days | Virtualisation Cluster | T. Alvarez | 149d | accepted | informational |
| CFG-714 | MFA enforced for administrators | Field Engineer Assistant | R. Vermeer | 226d | remediating | informational |
| CFG-715 | MFA enforced for administrators | Backup & Recovery | A. Petrova | 146d | accepted | informational |
| CFG-716 | MFA enforced for administrators | SIEM Platform | L. Marchetti | 203d | remediating | critical |
| CFG-717 | Secrets rotated within 90 days | Endpoint Fleet | C. Iversen | 115d | accepted | informational |
Change timeline (26)
Most recent first
- Prompt version rollout for assistantplannedhighFraud Signal SummariserCHG-9107 · 2026-09-11 07:00 UTC
- Decommission legacy reporting jobplannedmediumNetwork Remediation AgentCHG-9109 · 2026-09-03 08:00 UTC
- Scale container platform node poolimplementedcriticalEvent Streaming BusCHG-9103 · 2026-08-29 12:00 UTC