Improving secure score in our cloud org

If your Secure Score did not increase after implementing the Conditional Access policy to block OneDrive for Business sync from unmanaged devices, it may be due to a few reasons:

1. Policy Activation Delay: Sometimes, there can be a delay in the system recognizing changes made to policies. It may take some time for the Secure Score to reflect the new settings.
2. Completeness of Recommendations: Ensure that all related recommendations are fully addressed. The Secure Score only improves when all recommendations within a control are remediated. If there are other recommendations related to OneDrive or Conditional Access that are still outstanding, the score may not increase.
3. Other Factors Affecting Score: The Secure Score is influenced by various factors, including the overall compliance of your organization with other security recommendations. It’s important to review the complete list of recommendations and ensure that you are addressing them comprehensively.
4. Real-time Updates: The Secure Score updates in real-time, but it also syncs daily to receive system data about achieved points. Make sure to check back after some time to see if the score has updated.

If you have confirmed that all related recommendations are addressed and the score still hasn't changed, consider reaching out to Microsoft support for further assistance.

References:

• Enable conditional access support in the OneDrive sync app
• Microsoft Secure Score

Hi, can you share Entra ID CA policy settings what was implemented?

Also, what is your infrastructure? Is it Entra ID joined, Intune managed or using Hybrid?

Check this out - https://www.tenable.com/audits/items/CIS_Microsoft_365_v1.3.0_E3_Level_2.audit:3f5e86dce7c58a5da622bfb048e4ee24