Add Standards Template
When creating a standard, it is recommend to think about how you want your standards to be setup first. CyberDrain recommends splitting out standards per category, or service level. This prevents standards from becoming so large they become impossible to manage as too many items are in one standard. You can also split out categories such as "Intune Templates", "Entra Settings", "Managed Devices" etc.
For optimal performance and reliability, we recommend to not have more than 40 standards per template.
Creating a Classic Standard Template
Assign Template to Tenants
In the "Included Tenants" dropdown, select the tenant or tenants that you want this template to apply to. You can optionally select a tenant group to include. Including a tenant group will allow you to select tenant(s) or tenant group(s) to exclude.
Just under the tenant assignment dropdown(s), you will see a toggle called "Do not run on schedule". If you turn on this toggle, this template will only run manually. Leave this toggle off if you would like this standard to run every three hours.
Add Standards to Template
Click the "+ Add Standards to this template" button in the upper right of the page. This will display a modal that has a complete list of all CIPP standards that can be configured. For more information on each standard, see the standards category pages.
Toggle on the "Add this standard to the template" for each desired template. Once completed, click the "Close" button on the modal.
Configure All Standards
For each standard:
Set the desired Action(s). For assistance on selecting which action, review Actions. Drift configuration standards will instead have an optional toggle to allow you to automatically remediate when drift is detected.
Each standard will then have the potential for additional fields that need to be set. Please review those fields and configure as desired.
Click Save to store the configured settings. Click Cancel to clear out your changes.
Creating a Drift Standard Template
About Drift Templates
Drift templates provide continuous monitoring of tenant configurations to detect unauthorized changes. Each tenant can only have one drift template applied at a time.
Drift Standards Timing & Alerts
Once activated, drift standards are evaluated every hour. You will receive alerts via your configured Notifications settings every hour.
Remediation Options
Automatic Remediation: Immediately reverts unauthorized changes back to the template configuration
Manual Remediation: Sends email notifications for review, allowing you to accept or deny detected changes
Key Features
Monitors all security standards, Conditional Access policies, and Intune policies
Detects changes made outside of CIPP
Configurable webhook and email notifications
Granular control over deviation acceptance
Drift Standard Tenant Limitation
Each tenant can only have a single drift standard template applied to it. If you attempt to add a tenant to a second drift standard template, you will see an error.
Optionally Set Notification Settings
You will be able to set a custom webhook and/or email address to receive notifications on drift. If nothing is set, this will use the default webhook and/or email address from Notifications.
Add Standards to Template
Click the "+ Add Standards to this template" button in the upper right of the page. This will display a modal that has a complete list of all CIPP standards that can be configured. For more information on each standard, see the standards category pages.
Toggle on the "Add this standard to the template" for each desired template. Once completed, click the "Close" button on the modal.
Configure All Standards
For each standard:
Drift configuration standards will have an optional toggle to allow you to automatically remediate when drift is detected.
Each standard will then have the potential for additional fields that need to be set. Please review those fields and configure as desired.
Click Save to store the configured settings. Click Cancel to clear out your changes.
See It In Action
Standards Filtering
On both the add and edit standards template page, you will see options for how to filter the standards list added to the template. This is helpful for those templates that contain a lot of standards.
Search: A search box at the top will allow you to do keyword searches for standards
View, Sort, and Filter Options
View
With options for Cards and List, this will toggle how the table is presented to you
Sort By
This will present you with options for which attribute to sort the view by. Options are Name or Date Added
Order
This will alter the direction the selected "Sort By" is displayed. Options are "Ascending" and "Descending"
Categories
This will allow you to pick from the CIPP Standards categories to display only those you wish to review.
Impact
This will allow you to pick from the CIPP defined standards Impact to display only those you wish to review.
Recommended By
This will allow you to pick from the different organizations that recommend tenant settings to display only those you wish to review.
Compliance Tags
This will allow you to pick from the different compliance frameworks to display only those you wish to review.
New (30 days)
This toggle will allow you to display only those standards that have been recently added to CIPP for easy adoption of the latest updates.
Feature Requests / Ideas
We value your feedback and ideas. Please raise any feature requests on GitHub.
Last updated
Was this helpful?