Created by Claude - please verify

Secure Score - daily scores and control profiles from Microsoft Graph; 'quick win' means Microsoft rates the implementation cost as low.

Required Microsoft Graph permissions

SecurityEvents.Read.All — application permission, granted to the app registration with admin consent.

Endpoints: GET /v1.0/security/secureScores · GET /v1.0/security/secureScoreControlProfiles

Secure Score is recalculated once a day, so changes made today show up tomorrow. Points reflect Microsoft's weighting, not your organisation's risk.

If a permission is missing, this report shows a red load error with the Graph status code — not an empty table.

Secure Score & Top Improvement Actions

Where the tenant stands on Microsoft Secure Score, how it moved over the last 90 days, and which controls give the most points for the least effort. Controls marked as risk accepted or handled by a third party are kept but not counted as open.

No Secure Score controls were returned.