diff --git a/tasks/section_1/cis_1.4.x.yml b/tasks/section_1/cis_1.4.x.yml
index a58aa57..a7ef03c 100644
--- a/tasks/section_1/cis_1.4.x.yml
+++ b/tasks/section_1/cis_1.4.x.yml
@@ -50,6 +50,7 @@
             mode: 0600
         when:
             - ubtu20cis_1_4_2_grub_cfg_status.stat.exists
+            - ubtu20cis_1_4_2_grub_cfg_status.stat.mode != "0400"
   when:
       - ubtu20cis_rule_1_4_2
   tags: