When there is a range of acceptable values for a security control, we should be able to set the value of what we would like continuous enforcement to enforce.

For example, "Deleted user OneDrive content is retained for at least 90 days". Continuous enforcement sets this value to 180 days. For us, 90 days is acceptable as it meets the recommended minimum and we can recover data from our backups if required too.