Skip to main content

Patch Compliance Report by Business Unit

The prompt
In Microsoft Defender XDR (Threat & Vulnerability Management), generate a patch compliance report.

For devices grouped by [DEPARTMENT / LOCATION / DEVICE GROUP — specify which dimension is configured in your environment]:
1. Count of devices per group
2. Percentage of devices fully patched (no critical or high vulnerabilities)
3. Percentage with at least one unpatched critical vulnerability
4. The single highest-severity unpatched CVE in each group

Return as a table sorted by patch compliance percentage ascending (worst first). Flag any group below 70% patch compliance.

How to use it

  1. 1Select Copy the prompt above.
  2. 2Paste it into Microsoft 365 Copilot.
  3. 3Replace anything in brackets with your own detail, then send it.

Copilot gathers and drafts. You verify and decide. Check every figure, name and date against the system it came from before you act on it.

Written for

Security Manager, IT Director, Compliance Lead