Source: https://atomic-works-test.docs-staging.pageloop.ai/monitors/extended-checks-in-mdm-tool-comms/readme

# README

# Extended Checks in MDM Tool Comms

Sprinto now supports **extended device compliance checks** across major Mobile Device Management (MDM) tools, allowing organisations to automatically monitor key security controls—such as screen lock, antivirus, and disk encryption—without manual intervention.

These enhancements extend Sprinto’s ability to fetch, verify, and report compliance directly from your MDM provider’s APIs, ensuring real-time, audit-ready visibility into device posture.

---

### Supported Providers

Sprinto’s extended MDM checks are currently available for the following providers:

MDM ProviderSupported ChecksDocumentation LinkHexnodeScreen Lock, Antivirus, Disk EncryptionView articleMicrosoft IntuneScreen Lock, Antivirus (Windows only)View articleIru (Kandji)Screen Lock, AntivirusView articleManageEngineScreen Lock, AntivirusView articleJumpCloudScreen Lock, AntivirusView articleJAMFScreen LockView article

---

### Why These Checks Matter

Automated compliance verification helps organisations:

- Maintain **continuous visibility** into endpoint security posture.
- **Reduce manual evidence collection** by leveraging MDM data directly.
- **Streamline audits** by linking device controls to compliance frameworks.
- **Stay audit-ready** with real-time status updates across managed devices.

Sprinto’s extended MDM checks directly map to key compliance requirements such as:

Control AreaExample FrameworksMDM CheckAccess ControlISO 27001 A.9.2.3 / SOC 2 CC6.1Screen LockProtection Against MalwareISO 27001 A.12.2.1 / SOC 2 CC6.6AntivirusEncryption of Data at RestISO 27001 A.10.1 / SOC 2 CC6.7Disk Encryption

---

### How It Works

1. **MDM Integration:** Sprinto securely connects to your MDM tool using API credentials configured in the **Integrations** section.
2. **Data Fetch:** Device policy and app data are fetched at scheduled intervals.
3. **Compliance Mapping:** The fetched data is mapped to Sprinto’s internal datapoints for each control (e.g., screen lock timeout, encryption status, antivirus presence).
4. **Monitoring & Reporting:** Sprinto continuously updates monitor statuses, flags non-compliant devices, and generates remediation tasks.

---

### Supported Compliance Checks

Check TypeDescriptionSupported OSScreen LockValidates auto-lock enforcement and idle timeout ≤ 15 minutesWindows, macOSAntivirusDetects presence of recognised antivirus softwareWindows, macOSDisk EncryptionConfirms FileVault (macOS) or BitLocker (Windows) enabledWindows, macOS

---

### How to Get Started

1. Ensure your organisation’s MDM provider is integrated with Sprinto.
2. Follow the provider-specific setup guide to configure policies and permissions.
3. Reconnect your MDM integration within Sprinto (Settings → Integrations → Manage → Update Connection).
4. Verify that new monitors appear under the **Staff Devices** section.

Refer to the individual guides for step-by-step setup instructions:

- [Hexnode – Extended Checks](hexnode-extended-checks-for-disk-encryption-antivirus-and-screen-lock.md)
- [Microsoft Intune – Extended Checks](microsoft-intune-extended-checks-for-screen-lock-and-antivirus.md)
- [Iru (Kandji) – Extended Checks](iru-kandji-extended-checks-for-screen-lock-and-antivirus.md)
- [ManageEngine – Extended Checks](endpoint-central-extended-checks-for-screen-lock-and-antivirus.md)
- [JumpCloud – Extended Checks](jumpcloud-extended-device-checks.md)
- [JAMF – Extended Checks](jamf-extended-checks-for-screen-lock.md)

---

### Common Questions

**Q1. Are these checks available for all plans?**\
Yes. Extended checks are included in all Sprinto plans that support MDM integrations.

**Q2. How often does Sprinto sync MDM data?**\
Sprinto periodically fetches data from connected MDMs, ensuring near real-time compliance visibility.

**Q3. Can I disable specific checks?**\
Yes. Admins can disable monitors from the **Staff Devices** dashboard if they’re not applicable.

**Q4. What happens if an MDM API fails?**\
Sprinto will retry fetching data automatically. If the issue persists, a sync error notification will appear in the dashboard.