Recommendations

A recommendation is one security check on your Microsoft 365 tenant, for example “Require MFA for all admin roles”. Griffin31 checks each one on every scan and shows the result, the risk, and how to fix it.

States

Every recommendation has one state. The state also tells you who decided it: Griffin31 or a person on your team.

State	Who decided	Meaning
Passed	Griffin31	The setting meets the requirement
Partial	Griffin31	Part of the tenant meets the requirement, part doesn’t
Failed	Griffin31	The setting does not meet the requirement
Not reviewed	Waiting for you	Griffin31 can’t verify this automatically. A person needs to check it
Reviewed	Your team	A person checked it and marked it as reviewed
Exempted	Your team	Left out on purpose, with a documented reason
Unlicensed	Your licenses	Your Microsoft licenses don’t include the feature this check needs

Quick Filters

The boxes at the top of the list filter it in one click:

Filter	Shows
Passed / Failed / Not reviewed / Reviewed / Exempted / Unlicensed	Recommendations in that state
Quick wins	Major or critical impact, and easy or very easy to fix
In threats	Part of at least one threat’s attack path

The full Filters panel adds risk, impact, effort, product, scope, license, operating system and more. You can save your own table views.

Recommendation Details

Open a recommendation to see five tabs:

Tab	What you find there
Overview	The risk, why it matters, and its risk, impact, effort and MITRE ATT&CK mapping
Requirements	What must be true to pass, licenses needed, and related recommendations
Remediation	Step-by-step fix instructions, with notes to read before you change anything
Evidence	The data behind the result. See Evidence
History	Every change to this recommendation: state changes and team decisions

Decisions

Some recommendations need a person’s decision. There are two.

Mark as Reviewed

Use it when you have checked the setting yourself. Choose a reason:

Manual attestation
Remediation verified
Compensating control verified
Evidence accepted
Other (a note is required)

Exempt

Use it when a recommendation should not count for your tenant. Choose a reason:

Compensating control in place
Risk accepted by owner
False positive
Not applicable to this tenant
Other (a note is required)

For both decisions you can add a note for future reviewers and an optional Active until date. When that date passes, the decision expires and the recommendation is checked again.

You can edit or remove a decision at any time. Every decision is saved in the History tab and in Recent Activity with who made it and when.

Tip: an exemption is a business decision, not a fix. Use a clear reason and an expiry date so it gets reviewed again.