The 318-control catalog, unique IDs and framework mappings

Every control executes against the live Microsoft API and returns a verdict with the objects it found, carrying its CIS, NIST, CMMC and ISO 27001 references.

What a control carries

• 318 implemented controls across 8 Microsoft services
• Search, filters by referential and level, five live counters
• Per control: observed state, remediation path, PowerShell verification
• Stable unique ID per control (e.g. ENTRA-012), shown in-app and on every export
• References on every control: CIS, NIST, ISO 27001, ANSSI, NIS2, DORA, SCuBA, MCSB
• Mappings computed live from the packs, never from a brochure
• Declarative custom checks — no code — against Graph or REST connectors
• Importable control packs alongside the official catalog

Going further in the guide: the audit methodology behind the catalog.