MCSB ES-8: Endpoint Security
9 Senserva Microsoft 365 security checks provide evidence for Microsoft Cloud Security Benchmark control ES-8 (Endpoint Security). Each is checked against your tenant, ranked by Severity, with validated remediation.
What MCSB ES-8 covers
The Microsoft Cloud Security Benchmark is Microsoft's own security baseline for Azure and Microsoft 365, organized into control domains. ES-8 sits in the Endpoint Security domain. Senserva evidences it with the 9 checks below, so you can see, per tenant, whether the control is actually met rather than assumed.
Ask your own AI about this control
Copy this prompt into Claude, ChatGPT, or Copilot. The facts are included, sourced from this page.
The 9 checks that evidence MCSB ES-8
Click any row for why it matters and how to fix it, with a link to the full check page.
| Senserva check | Severity | What it verifies |
|---|---|---|
| Intune Policy Compliance Code Integrity Enabled | High | Code Integrity is not required by device compliance policy |
| Intune Policy Compliance Device Health Attestation Required | High | Device Health Attestation is not required by device compliance policy |
| Intune Policy Compliance Early Launch Anti Malware Enabled | High | Early Launch Anti-Malware (ELAM) is not required by device compliance policy |
| Intune Policy Compliance Firmware Protection Enabled | High | Firmware protection is not required by device compliance policy |
| Intune Policy Compliance Kernel Dma Protection Enabled | High | Kernel DMA Protection is not required by device compliance policy |
| Intune Policy Compliance Memory Integrity Enabled | High | Memory Integrity (HVCI) is not required by device compliance policy |
| Intune Policy Compliance Secure Boot Required | High | Secure Boot is not required by device compliance policy |
| Intune Policy Compliance Tpm Required | High | TPM (Trusted Platform Module) is not required by device compliance policy |
| Intune Policy Compliance Vbs Enabled | High | Virtualization-Based Security (VBS) is not required by device compliance policy |
Also evidences
The same checks provide evidence for these frameworks, so one fix counts across your obligations:
Every MCSB control and the checks that evidence it: the control reference. The full benchmark crosswalk: MCSB for Microsoft 365.