I have taken the ASD Conditional Access policy recommendations here:
https://blueprint.asd.gov.au/configuration/entra-id/protection/conditional-access/policies/
and created a script here:
https://github.com/directorcia/Office365/blob/master/asd-ca-get.ps1
that will compare your existing Conditional Access configuration to what the ASD recommends and tell you what you should consider changing to bring your policies more in alignment with those from the ASD.
Above, you’ll see one policy evaluation and recommendation outputted to a HTML file for easy reading.
The documentation for the script is here:
https://github.com/directorcia/Office365/wiki/ASD-Conditional-Access-Policy-Evaluation-Script
I look forward to hearing what you experience is using my script.
CIAOPS 