SecurityInsight settings · Settings > Data & retention

Plan findings automatically (Auto in the maintenance window)

Key	SI_Pro_Remediation_AutoSchedule
Where	Settings > Data & retention > Overdue and planning
Type	On / off
Default	off -- findings are planned only when a person applies the flow on the finding's page
Edition	pro

What it does

Lets the daily mail job plan every finding that has no governance status yet and whose department's remediation flow is 'Auto in the maintenance window' for that department's next maintenance window.

When enabled

When on, such findings get a 'planned' entry in their governance log (by SecurityInsight, with the window) and show as planned on the department page and in the technical owners' mails. SecurityInsight never pushes a change to Defender, Intune, Entra or Azure: the fix itself is made by the platform's own tooling, and the next collections show whether it worked. A department without a maintenance window gets nothing planned.

When disabled

findings are planned only when a person applies the flow on the finding's page

Risk and how to reverse it

Changes how long data is kept or how quickly assets are treated as gone. Shortening a retention DELETES older data at the next clean-up and that cannot be undone; shortening a grace period retires assets (and closes their findings) sooner. Lengthening is safe but uses more storage.

Requires

A SecurityInsight Pro licence.