Microsoft 365 Security Assessment
For most organisations, Microsoft 365 and Entra ID make up the most important security surface. A misconfiguration in Conditional Access, OAuth permissions or partner access can give an attacker far more reach than you expect. We review the entire surface — risk-based and read-only.
What the review covers
- Entra ID, MFA coverage, Conditional Access, PIM and RBAC
- Partner access (GDAP), users, guests and B2B collaboration
- Exchange Online, SharePoint and OneDrive — incl. sharing and forwarding
- OAuth permissions, App Registrations and Enterprise Apps
- Intune compliance, Defender and Secure Score
- Logging, audit, tenant region and data extracts
What you get
- Written report with an executive summary for leadership
- Technical findings detailed enough for your own team
- Action plan prioritised by risk and feasibility
- Typically 2–3 weeks from start to report
Out of scope
- Does not cover endpoints or on-premises infrastructure
- Not implementation or incident response
- Not a penetration test
How it works
Free pre-analysis
We assess the scope and give you a fixed price. No obligation, no surprises.
Read-only data collection
Automated extracts via PowerShell and Graph — zero operational disruption.
Analysis & assessment
Manual specialist review with risk prioritisation and business context.
Report & plan
An executive summary for leadership, technical depth for your team — ready to act on.
Frequently asked questions
How much of our own time is required?
Typically about an hour for a kick-off meeting plus setting up read-only access. We handle the rest.
Does the assessment require installing software?
No. Data collection uses automated, read-only extracts via PowerShell and Microsoft Graph.
Can the report support NIS2 or ISO 27001 work?
Yes. The report documents your controls and prioritised improvements, and several clients use it directly in compliance work such as ISAE 3000, NIS2 and ISO 27001.
Ready to have your security verified?
A free, no-obligation pre-analysis. A fixed price. A concrete plan you can act on right away.
Book a free pre-analysis