Example, read only. A sample company whose own team runs its CMMC program here, reviewed by a credentialed officer and kept current.
Level 1 · Connectors
Proof pulled read only, confirmed by your team.
Connect a system once and the platform pulls its settings evidence and keeps it fresh. It reads configuration only, never your files, your mail, or any controlled data. Cedar Ridge Machine Works, LLC connected Microsoft 365 on June 10, 2026.
Microsoft 365
Entra ID, Intune and Microsoft 365 admin. A Global Administrator granted read only consent once; there is no ongoing sign in after that.
- Cloud
- Commercial or GCC
- Tenant
- cedarridgemachine.onmicrosoft.com
- Connected
- June 10, 2026 by Raymond T. Cedar
- Freshness
- Checked daily, last check today
Example tenant. Nothing on this page is a real Microsoft 365 account.
What it pulls, read only
3 pulls, each mapped to the Level 1 letters it can carry.
Authorized users roster
Fresh copy every 30 daysCan carry
- AC.L1-3.1.1 [a,b,d]
- IA.L1-3.5.1 [a,b]
Multi factor authentication (MFA) registration report
Fresh copy every 90 daysCan carry
- IA.L1-3.5.2 [a]
Access and session policies
Fresh copy every 90 daysCan carry
- AC.L1-3.1.1 [f]
- IA.L1-3.5.2 [c]
- AC.L1-3.1.20 [c,d]
Your team stays in charge
Your team confirms every answer. Nothing turns MET on its own.
A pull carries a letter only when what it returns shows the setting in place. When it does not, the pull is still filed, as a finding to fix, and the letter is withheld. Charlie drafts the narrative from your answers, and your team confirms it before anything counts. A credentialed officer reviews every step and never signs.
Year round, cycle after cycle
Connected evidence keeps watching all year.
Checked daily
The platform checks the currency of every enabled area's evidence automatically each day, so no one has to remember to click sync.
Refreshed on schedule
Each evidence kind carries a freshness window, 30 days for rosters, devices, and activity, 90 for security policies and settings. When it lapses, the next daily check pulls a fresh copy. One live copy per kind, never a pile of stale duplicates.
Drift flagged
Every fresh pull is compared with the last copy. If a setting changed, the old copy is retired as superseded and a drift flag opens on the mapped control. Anything going stale lands on your compliance calendar and in your email digest.
What this connector can never see
Stated before you connect. These stay in your Registers, Policy Center, and manual capture, with the same freshness tracking:
- · Physical security, visitor logs, facility access
- · Policies and procedures
- · Paper media and media disposal
- · On premises network gear, firewalls, VLANs
- · Anything outside this Microsoft 365 tenant
- · File contents, mail contents, or any controlled data
Google Workspace
Ready to connectRuns on Google Workspace instead? It connects here the same way, read only, and your team confirms what it brings in.
Connect your own
Connected proof stays fresh. Your team stays in charge of every answer.
Start free for 30 days, no credit card, or book a free advisory call if you would rather talk it through first.