Services
Private AI AI Services Security Strategy
Company
Resources / Blog About Contact us
Security

M365 Health Check.

Microsoft 365 is where most NZ organisations do their work and carry most of their risk. We review your configuration against best practice and tell you what to change, in order of priority.

Book a health check Back to Security

What we review

Most M365 tenants are not configured the way Microsoft intends.

Microsoft 365 ships with sensible defaults, but over time, as users are added, policies are changed, and exceptions are made, the configuration drifts. Most organisations we review have meaningful security gaps they are unaware of.

Our M365 Health Check reviews your tenant against Microsoft's own security benchmarks and established frameworks, identifies what is misconfigured or missing, and produces a plain-English report with a prioritised list of what to fix first.

Deliverable: A written report with findings, risk ratings, and specific remediation steps your IT team or provider can act on immediately.

Areas we cover

  • Identity and access management, including MFA coverage and conditional access
  • Email security: SPF, DKIM, DMARC, anti-phishing, and safe links
  • Data loss prevention and sensitivity labels
  • Privileged account configuration and admin role assignments
  • Audit logging and alerting configuration
  • Guest access and external sharing settings
  • Device compliance and Intune policy review
  • Microsoft Secure Score analysis and gap identification

How it works

Simple, fixed-scope, no disruption.

Read-only access

We do not need admin credentials or the ability to make changes. Review access only, so there is no risk to your environment during the assessment.

Fixed timeframe

The review is completed within an agreed timeframe, typically one to two weeks from access being granted. No open-ended engagement.

Plain-English report

Findings are written for your leadership team, not just your IT provider. Every issue is explained in terms of business risk, not technical severity alone.

Remediation support

We can implement the recommended changes ourselves, hand them to your IT team, or brief your managed service provider. Your choice.

Find out what your M365 tenant is actually doing.

Most reviews surface at least one finding that surprises the client. Better to find it now than after an incident.

Get in touch