Start with what you have
Your settings, licenses, and working practices are the starting point. We review how people use Microsoft 365, what needs protecting, and who manages it.
You get a prioritized view of what needs attention and what a change would involve.
Make access deliberate
Review sign-in protection, administrator roles, application permissions, and guest access. Decide who needs access, how much, and how it should end.
Include recovery before tightening access. Check the result against the accounts and applications that people actually use.
Connect devices, email, and data protection
Look at device management, email configuration, sharing, and information handling together. Microsoft Entra ID, Intune, Defender, and Purview can play a part where they fit your needs and licensing.
Agree a manageable scope, consider user impact, and test changes before expanding them.
Keep evidence of the work
- Record the starting settings and reason for the change.
- Agree responsibilities and recovery steps.
- Capture expected and observed test results.
- Document what changed and what still needs work.
Choose where to begin
A configuration review, a specific access concern, or help carrying out a planned improvement. We can scope the work around the problem you need to solve.
Protecting an individual's personal accounts and support arrangements? See VIP OPSEC. You can also browse the free guides or explore all services.
Further reading
Microsoft's small-business security resources describe the platform's security and management tools. Feature availability and licensing need checking for your environment.