Getting a failure - yet our security is set more stringent than the test

[O365-Zende]

On a number of the tests I reviewed after failure, there was a theme of fail because it doesn't take into account we may have a setting set tighter than the recommendation.

I would suggest tests where item best practice = "x", maybe allow for item = "x" or less than or more than depending on the test.

This would allow companies that choose to be more demanding than the best practice to have those tests pass.

4 fail examples below