L1
TrueConfig Recommended Secure Baseline
Most organizations. First secure posture.
Advisory baseline for most organizations. Establishes a strong security foundation with low operational risk.
Low operational risk, high security return
25
Total Controls
7
Critical
9
Auto-Remediable
25
New at L1
What's Included
- Stops common identity attacks
- Aligns with CIS and Microsoft defaults
- Avoids lockouts
- Builds trust in TrueConfig recommendations
Not Included (Available at Higher Levels)
- Phishing-resistant MFA for all users
- Strict PIM-only privilege model
- Device compliance for admins
- Automated role or permission removal
Framework Alignment
CIS Microsoft Entra ID Foundations BenchmarkMicrosoft Secure DefaultsMicrosoft Zero Trust Identity Pillar
Controls Included
Identity & Authentication4 controls
Privileged Access3 controls
Conditional Access4 controls
Workload Identity & Applications4 controls
Guest & External Access4 controls
Governance & Hygiene3 controls
Logging & Visibility2 controls
Ready to implement the Recommended Secure baseline?
TrueConfig will scan your Microsoft 365 tenant and show you exactly which controls need attention.