Offer · IT Services & Advisory

Microsoft 365 Health Check

A security review of your Microsoft 365 environment in a few days: Entra ID, Conditional Access, Intune, Defender, Purview and Secure Score. You get a prioritised action list and support to implement it.

Entra IDConditional AccessIntuneDefenderSecure Score

Who it is for and when

Suits organisations that use Microsoft 365 and want to know that identities, devices, email and data are protected the way Microsoft recommends and their requirements demand.

  • You have adopted Microsoft 365 but never done a consolidated security review.
  • You have had a phishing or account takeover incident and want to close the gaps.
  • The Cybersecurity Act, ISO 27001 or a customer requires you to show how the cloud environment is secured.
  • You suspect that licences and features you already pay for are not being used.

What we do

  1. Inventory. We go through the tenant, licences, identities, devices and the services in use.
  2. Review against best practice. Entra ID and multi-factor authentication, Conditional Access, Intune and device compliance, Defender, Purview and email protection (SPF, DKIM, DMARC) are assessed against Microsoft’s recommendations and Secure Score.
  3. Risk assessment. Findings are prioritised by how serious they are and how easy they are to fix.
  4. Action list and walkthrough. You get a prioritised action list and a walkthrough where we explain what should be done first and why.
  5. Implementation if needed. If you want help we implement the actions together with you, in controlled steps.

You get

  • Report with current state and Secure Score
  • Prioritised action list with justification
  • Walkthrough with the IT lead
  • Recommendations on unused licences and features
  • Quote for implementation if you want support

Scope and price

A defined engagement of a few days for a normal-sized tenant. Larger environments with several tenants or extensive Intune management take somewhat longer.

The price varies with the size of the environment. You get a fixed price for the review in the proposal. Implementation of actions is quoted separately.

How it works

  1. A first conversation. We listen to your situation and explain how we usually set up the work. You get our assessment straight away, free of charge.
  2. A proposal with scope and price. A short written proposal with what is included, what you get, who does the work and what it costs.
  3. Delivery and handover. We work together with your organisation, report continuously and hand over so that you can maintain the result yourselves.

Frequently asked questions

Do we need to give you administrator rights?

We need read access to review the configuration, for example the Global Reader or Security Reader role. We only make changes if you choose implementation, and then with an agreed, time-limited permission.

What is Secure Score?

Microsoft’s built-in measure of how well your tenant follows recommended security settings. It is a good indicator but not the whole picture, which is why we also review what Secure Score does not measure, such as roles, sharing settings and email protection.

Is backup of Microsoft 365 included?

No, but we assess whether you need it. Data protection in Microsoft 365 is a shared responsibility, and most organisations need their own backup with retention that fits their requirements.

Reviewed by Kristensson i Skåne AB. .

Sources: Microsoft Learn: Microsoft Secure Score · Microsoft Learn: Microsoft 365 security · CIS Benchmarks

Want to know how secure your Microsoft 365 environment is?

Contact us