Skip to content

Environment & People

Find it in the side navigation under Environment & People (/environment). The page answers the two questions every organisation needs to answer to be secure: what do you own and run, and who actually works here. It has three sections: Know your environment, Know yourself and Prove it.

A graph of your assets, grouped by type: devices, domains, cloud accounts and software.

  • The graph opens on one box per asset group, each with a count, for example Domain · 3 items · open › or Endpoints · 15 items · open ›. Click a box to open it and see what’s inside.
  • Below the graph, a summary line counts what you’ve onboarded, for example 19 assets · 15 devices · 3 domains · 1 cloud · 0 software.
  • Open full graph takes you to the full‑screen asset graph, where you can drill from asset groups down to individual assets and step back up again.
  • Network connections: N mapped · View → counts the connections you’ve mapped between assets and opens the Network connections view.
  • The more you add in Assets and Network connections, the more this section shows.

A graph of your people, grouped by department. People with no department appear under Unassigned.

  • Click a department box to see who’s in it.
  • The summary line shows your headcount, your MFA split (MFA: N on / N off) and how many people have turned up in a known breach (Breach hits: N). These are shown as separate counts, never blended into one percentage.
  • Open people directory takes you to the full People directory.
  • For the reporting‑line view, open Departments & org chart in the side navigation. There you can switch between Groups and Org chart, and group people by department, office or employment type. See Departments & the org chart.

A large Unassigned group usually means people were imported or synced without a department. Fixing it in the People directory makes this graph, and your org chart, more useful.

The leaver evidence report: for each person who has left, when they left, when their access was revoked, and how quickly that happened against your target.

It keeps two kinds of evidence apart:

  • Observed: a directory sync saw the account disabled. The SLA figures use this only.
  • Attested: someone recorded when access was revoked. The report shows whether your directory agrees with that claim.

How leavers get here, and what the checklist asks for, is in People directory — Joiners, movers and leavers.

For everyday security: seeing your environment and your people on one screen is the fastest way to spot what’s missing: devices nobody owns, a large Unassigned group, people without MFA.

For compliance: this page is where “know your environment, know yourself” becomes evidence. An accurate asset inventory and people directory underpin the access‑control, asset‑management and joiner/mover/leaver requirements in every framework in the catalogue, and the leaver report is the record auditors ask for.


Next: People directory →