You can extend your Smart Groups in Workspace ONE to add groups for devices tagged with "Lookout MES - [Low/Medium/High] Risk," so that any device with an active threat is placed in the corresponding group(s). By applying policies to those groups, you can create enforcement actions that remain in effect until a device user remediates the threat and has their device automatically moved out of the affected Smart Group in Workspace ONE.