Attach or Detach Baselines
Table of Contents
Prerequisites
To use Syncro’s Security Posture Management & Baselines, you’ll need to first integrate Microsoft and map Syncro Tenants. Then you can attach an available Baseline to one or more Syncro Tenants.
About the Available Baselines
Syncro offers a set of baselines so you can match the depth of Microsoft 365 assessment and remediation to each client's needs. Choose the Secure Rules Library for full CIS Microsoft 365 Foundations Benchmark v6.0.0 coverage in one baseline, one of the three CIS Implementation Levels to match a tenant's security maturity, or the licensing-agnostic Security Essential baseline for Standard and Entry-Level subscriptions.
Syncro Secure Rules Library
The Syncro Secure Rules Library is the comprehensive option: every automatable rule across all three CIS Implementation Groups, combined into a single baseline. Attach it when a tenant needs full CIS Microsoft 365 Foundations Benchmark coverage without managing separate baselines per level, typically your largest or most mature clients, where nothing in the automatable framework should be left unchecked.
Security Implementation Level 3
Security Implementation Level 3, based on CIS Microsoft 365 Foundations Benchmark v6.0.0, is the most rigorous set of security settings, built for organizations with dedicated security specialists defending regulated, sensitive data and systems against sophisticated, targeted attacks and zero-day threats. The 90+ automatable rules cover advanced safeguards such as insider risk management and privileged identity monitoring.
Security Implementation Level 2
Security Implementation Level 2, based on CIS Microsoft 365 Foundations Benchmark v6.0.0, is an advanced set of enterprise-grade security settings, built for organizations managing sensitive data and regulatory demands across multiple departments. The 70+ automatable rules cover advanced safeguards such as conditional access policies and data loss prevention.
Security Implementation Level 1
Security Implementation Level 1, based on CIS Microsoft 365 Foundations Benchmark v6.0.0, is an expanded set of foundational cyber security settings, great for small businesses or those that are just starting out on their security and compliance journey. The 50+ automatable rules cover essential cyber hygiene such as MFA and mailbox auditing.
Security Essential
The Security Essential Baseline is a Syncro-curated toolkit designed to track and enforce Microsoft 365 security best practices. Tailored for Standard and Entry-Level subscriptions, it offers straightforward protection for minimal-security environments without unnecessary complexity. With over 40 licensing-agnostic rules, this baseline allows you to evaluate any Microsoft 365 tenant across key areas like identity, data access, and overall cybersecurity hygiene.
For more detailed information about the individual rules used in these baselines, refer to the Baseline Rules Logic List.
Attach a Baseline to Syncro Tenants
To attach a Baseline to your Syncro Tenant(s), follow these steps:
- Navigate to the Baselines tab.
- Click the Tenants toggle to display the “Tenants” view.
- Check one or more boxes (or click the header box) to select Syncro Tenant row(s).
- In the upper right corner, click Attach Baseline.
- Select a Baseline, then click Attach:
Syncro closes the pop-up window and all your selected Syncro Tenants show the Baseline in that column.
Notes:
- When you first attach a Baseline to a Syncro Tenant, it may take a few hours for Syncro to complete an audit and compliance numbers to appear in the "Tenants/Compliance" view of the Baseline Management table. (The actual time depends on how many Rules are part of the Baseline.)
- Once it's finished, you'll see security posture information for each of the Tenants in the Failed, Last Audited, Secure Score, and Compliance columns in the “Tenants/Compliance” view of the Baseline Management table.
Tip: You can also Create & Download an Assessment to share with others.
Detach a Baseline From a Syncro Tenant
To attach a Baseline from a Syncro Tenant, follow these steps:
- Click the Baselines tab/module.
- Click the Tenants toggle to display the “Tenants” view.
- Click on any row to display that Tenant's Compliance Details Page.
- In the upper right, click Manage.
- Select “Detach Baseline.” Syncro opens a pop-up asking you to confirm the action:
- Click Detach. Syncro will no longer audit the Syncro Tenant according to the Baseline.