MT.1085: Pending approvals for Critical Asset Management should not be present.
| ID | MT.1085 |
| Severity | Low |
| Suite | Mito |
| Product | Defender |
| Feature | Exposure Management |
| Security area | Logging and detection |
| Resource type | Tenant |
| User impact of fixing | Low |
| Effort to fix | Low |
| Reads from | Microsoft Graph |
What this checks and how to fix it
Section titled “What this checks and how to fix it”Microsoft provides an approval step for assets that do not meet the automatic classification threshold. Assets with a lower classification confidence score must be approved by a Security Administrator. Stale pending approvals can lead to limited visibility in Microsoft Defender XDR and potential security risks if critical assets are not properly identified.
Therefore, you should regularly review critical assets to ensure the correct classification has been applied to your assets.
How to fix
Section titled “How to fix”On the Critical asset management page, review the asset classification named in the Mito test results. Review the pending approvals and verify the correct classification of the listed assets.
More details are available in the Microsoft Learn article: “Add assets to predefined classifications”.
Mito check. Author: Cloud-Architekt. Open-source licences.
Open-source licences. CIS Benchmark material © Center for Internet Security, Inc.; CISA SCuBA baselines are public domain (CC0).
© 2026 Virtual Petals. Mito is a Virtual Petals service, hosted in Microsoft Azure UAE North.