When running Microsoft 365 Security Inspections, ConnectSecure should identify the licenses assigned within the tenant and compare them against the licensing requirements for each security finding. Many remediation recommendations require specific Microsoft licensing such as Microsoft Defender for Office 365, Entra ID P1/P2, Intune, or Purview. Today, engineers must manually determine whether a finding can actually be remediated with the customer's existing licenses. Requested enhancements: Detect and inventory Microsoft licensing during the assessment. Map each finding to its minimum licensing requirement. Indicate whether the remediation is: Available with current licensing Requires a license upgrade Not available due to licensing limitations Add report filters for: Remediable Findings License-Constrained Findings License Upgrade Opportunities Example: Safe Links Not Enabled Current License: Business Standard Required License: Defender for Office 365 P1 Status: Requires License Upgrade This would allow engineers to focus on actionable remediation items and provide customers with more accurate security guidance. Additionally, provide a customer-facing Risk Acceptance report that allows findings to be marked as: Remediated Scheduled for Remediation Requires License Upgrade Accepted Risk The report should allow customer acknowledgment of risks that cannot be remediated due to budget, operational requirements, or licensing constraints. This information should also be available within compliance reporting so MSPs can document: Findings identified Required licensing Recommended remediation Customer decisions Accepted risks Compensating controls This would create a stronger audit trail for compliance frameworks, cyber insurance reviews, security assessments, and vCIO/QBR discussions while reducing engineering effort spent researching licensing requirements and explaining why certain recommendations cannot be implemented.
