Need to assess a customer’s Microsoft 365 security and decide what to address first? Our team carries out the assessment on your behalf and turns the findings into practical recommendations. You get a clear basis for explaining risks to your customer and planning improvements, without having to maintain every specialist skill in-house.
1. Assess the environment and set priorities
Once the necessary access has been authorised, we review the configurations and security information available across the Microsoft 365 environment:
- Identity and access: multifactor authentication, administrator accounts, Conditional Access and guest users in Microsoft Entra ID.
- Email: Exchange Online and Microsoft Defender phishing protections, forwarding rules and domain authentication.
- Devices: management, compliance, encryption, updates and protection status visible through Microsoft Intune and Defender.
- Collaboration: sharing and external access settings in Teams, SharePoint and OneDrive.
- Data protection: audit logging, retention, sensitivity labels and data loss prevention with Microsoft Purview.
We assess the gaps in the context of the customer’s licences, existing solutions and working practices. Items that need further investigation are clearly distinguished from confirmed weaknesses.
You receive an executive summary, detailed findings and our remediation plan, identifying priority actions and prerequisites.
2. Implement the agreed improvements
Your team can use the plan to carry out the remediation work. Alternatively, you can ask MC3 Cloud to implement some or all of the agreed changes.
We then work with you to define the changes, their sequence and the precautions needed to manage user impact. Implementation is separate from the initial assessment and follows a scope agreed with you.
The assessment covers configurations and information accessible within Microsoft 365. It is neither a penetration test nor a compliance certification.