You Passed a Penetration Test, and You Want to Lock Down your CA Policies
Your organization just successfully passed a penetration test that assessed the robustness of your environment and found that your Conditional Access policies are configured correctly. Following the test, you want to ensure that no unexpected changes will take place in your Conditional Access policies. You’re particularly concerned that policies could be disabled or modified in ways that could leave your organization vulnerable to attacks.
CA Gatekeeper’s Protected Policies functionality is designed to ensure that no CA policy modifications could take place so that your systems will not be exposed.
This feature also ties into the Approval Workflow, where you can require approval for any changes made to your CA policies during high-risk periods, such as penetration tests. This ensures that any change is authorized by a designated security officer, adding another layer of security to your organization.