We are facing an issue in Exposure Management Identity when calculating recommendation impact for set of recommendations - ‘Enforce MFA in your organization’, ‘Remind your users to change their password’ and ‘Reset passwords of users with risky login activity’.
Read the full article here:
https://community.withsecure.com/en/kb/articles/31638-some-exposure-management-identity-recommendations-not-being-updated-after-action