Setup

4 of 6 steps complete

MDM connector

Jamf Pro (prod) · Intune (prod) · Kandji (prod)

Identity source

Okta SCIM connected · 487 users syncing · BU/geo/manager attributes live

Scanner rollout

472 / 487 devices enrolled (96.9%) · 15 BYOD opt-in pending

Data residency & privacy

Region: us-east-1 · Retention: 13 months · EU-residency enabled for marcus.w (UK)

…

Works-council disclosure (EU)

Template ready · pending legal review by mia.s · blocker for Dublin QA fleet

…

SIEM integration

Splunk HEC connected · Sentinel pending credential rotation · Chronicle not configured

Region

us-east-1 (primary) · eu-west-1 (EU tenants)

Encryption

BYOK (AWS KMS) · FIPS 140-3 validated

Classifier

Local (no data egress) · on-device agent

RBAC

CISO · SOC lead · analyst · read-only auditor (via Okta groups)

Retention

13 months default · configurable 6–36 months

Shell-history scan

Disabled in EU · enabled US · user-level regex-filter-before-upload