Self-guided worksheet. This reading edition provides questions and evidence criteria. It does not calculate a score, produce a radar chart, compare peers, save answers, email results or generate a PDF.

Start with the surfaces the team can actually inspect. This worksheet helps record coverage and unanswered questions; it does not scan endpoints, detect connectors or calculate exposure.

How to use it

Choose one workflow. For each question, record the answer, source, owner, date, gap and next check in your team’s document. Use “unknown” when the evidence is absent. Repeat after a material workflow change to compare your own records.

Managed endpoints

Which approved AI clients and local connector configurations can you inventory?

Evidence to collect: Device coverage, scan or inventory source, owner and observation time.

Delegated identity

Which OAuth grants and delegated sessions can reach business systems?

Evidence to collect: Application, user, scope, expiry and the person responsible for review.

Repository configuration

Which shared agent or connector configurations are present in code?

Evidence to collect: Repository, file or commit reference, system reach and current owner.

Unmanaged work

What browser-only or personal-device use is visible only through attestation?

Evidence to collect: The surveyed population, observed gaps and a clear distinction from telemetry.

Materiality and response

Which findings matter for the actual customer workflow?

Evidence to collect: Data class, action authority, consequence, owner and a decision to approve, restrict, investigate or remediate.

Turn the gaps into a bounded next step

Start with the most consequential unresolved job. Agree what would establish a better result, test the correction, and retain the source and outcome limits.

Use the reliability workflow worksheet · Explore Tensile · Discuss a concrete workflow