Identity & MFA
How users and administrators sign in, and which methods are allowed.
Assessment
Microsoft 365 Security Assessment: know where you stand.
An independent review of how well your Microsoft 365 tenant protects identities, email, devices and data — with clear, prioritized recommendations.
Why start here
Most risk sits in settings you already control.
Microsoft 365 is where most organizations keep email, files and identities. It is also where most attacks begin: a phished password, an overshared folder or an administrator account without strong protection.
Many of the most effective protections are already included in your licensing but have never been configured. An assessment shows exactly which ones, and in what order to address them.
Assessment scope
What we review
Scope is confirmed for your environment before work begins.
Privileged accounts
Who holds administrator roles and whether that access is necessary.
Conditional Access
Which policies exist, what they enforce and where gaps remain.
Email protection
Anti-phishing, impersonation, SPF, DKIM, DMARC and forwarding settings.
Endpoint visibility
Which devices are managed, encrypted and reporting to Defender.
External sharing
How files and sites are shared outside the organization.
Logging & audit
Whether the activity records you would need in an incident are available.
Recommendations
Findings in plain language, ranked by risk and effort.
How it works
Four simple steps
- 01
Scoping conversation
We discuss your organization, concerns and Microsoft licensing, then confirm the scope, deliverables and fee in writing.
- 02
Least-privilege access
You grant read-only roles, such as Global Reader and Security Reader, for the review period. We do not need to change settings to assess them.
- 03
Review
We examine configuration, policies, reports and logs across the agreed areas and compare them with current Microsoft guidance.
- 04
Findings session
We walk you through the results in plain language, with recommendations ranked by risk and effort.
Questions
Common questions
How long does the assessment take?
It depends on the size and complexity of your tenant. We confirm the timeline, deliverables and fee during the scoping conversation.
Will you change anything in our tenant?
No. The assessment uses read-only access. Any remediation is agreed separately, after you have reviewed the findings.
Do we have to buy managed services afterward?
No. Many organizations use the findings to brief internal staff or another provider. If you would like help with remediation, we can scope it separately.
What licensing do we need?
The assessment works with any Microsoft 365 business or enterprise plan. Part of the review explains which security features your current licensing already includes.
Next step
Request a Microsoft 365 Security Assessment.
Tell us a little about your organization. We will follow up to discuss scope and next steps.