Written security report
A plain-English report covering the agreed checks, your Secure Score, and findings on account access, OneDrive and SharePoint sharing, email and device protection. Any information we couldn't confirm is clearly identified.
Microsoft 365 Security Review
Is your Microsoft 365 set up to protect your business?
Your business relies on staff accounts, company files and work devices being properly looked after. We review your Microsoft 365 protections—including email, OneDrive and SharePoint—and explain your Microsoft Secure Score in plain English.
What we check
The questions your business needs answered
How well are staff accounts protected?
We review extra sign-in checks, former staff accounts and accounts that can change company settings.
Who can access your OneDrive and SharePoint files?
We review who can view, change or share OneDrive documents and SharePoint team files—including outside contacts, old sharing links and access left behind when staff leave.
Are work computers properly protected?
Where included in your subscription, we review how work computers are managed and protected.
How is your company email protected from scams?
We examine email protections and settings that help spot suspicious messages and reduce misuse of your business's name.
Which outside apps can access your information?
We review connected apps and the permissions they hold, including access that may no longer be needed.
Are you using the protection you've paid for?
We check available Microsoft 365 security features, unused subscriptions and who's responsible for looking after the settings.
What does your Microsoft Secure Score mean?
Microsoft's explanation of Secure ScoreMicrosoft Secure Score indicates how your business has addressed Microsoft's recommended security actions. We review your current score and the actions behind it, then explain which improvements fit your risks, budget and the tools you already have.
The score is a starting point. A high score doesn't guarantee that your business is secure. We also examine the agreed account, file-sharing and device settings, including areas the score may not fully cover.
Clear answers to take away
What you receive
Prioritized 90-day action plan
Urgent issues highlighted first, followed by improvements to plan over the next 90 days. Actions consider business impact, practical effort and cost.
Findings discussion
A conversation with Christian to walk through the report, answer your questions and clarify what action you or your IT provider need to take.
An example from a report
See what a finding means for your business.
This fictional example shows how we explain a file-sharing concern and give your provider a clear next step.
EXAMPLE / 01Priority: High
Customer documents are shared through an open link
- What we found
- A SharePoint folder containing customer documents has an “Anyone” sharing link. Someone holding the link can view these files without signing in. Who actually needs access hasn't been confirmed.
- Why it matters
- If the link is forwarded, documents may reach people you didn't intend to give access to. You need to know who should receive the files and whether the sharing settings match that need.
- What to ask your provider
- Confirm who needs access, review the link and folder permissions, and use sharing restricted to named people where appropriate. Check whether existing links should be removed or replaced.
When open sharing may be appropriate
Some businesses use open links for public documents or other agreed workflows. The level of sharing should match the sensitivity of the files and the people who need access.
Microsoft's guidance on sharing linksSuggested owner: Your IT providerNext step: Investigate promptly
A straightforward process
How your review works
Tell us your concern
Use the introductory call to explain your concern about account access, file sharing, email or work devices.
Agree what we'll check
Before you commit, we agree the checks, fee, schedule and information needed for your review.
We carry out the review
We examine the agreed settings and records, then prepare and send your written report and action plan.
Talk through the findings
We explain what deserves attention first and help you decide what to ask your provider to do.
Practical questions before you start
What information or access will you need?
We usually need Microsoft 365 subscription details, account and device records, your Secure Score, and the relevant OneDrive and SharePoint settings or reports. We agree permissions first and use view-only access where practical. We'll involve your IT provider if they need to supply information or arrange access.
How long will the review take?
Timing depends on the size of your business, the agreed checks and the information available. We'll confirm the expected schedule, your involvement and the findings discussion before work begins.
Can I book just this review?
Yes. You can book the Microsoft 365 Security Review on its own or include it in an Independent IT Review. If your concern is your provider's overall support, contract or technology spending, the broader review is the place to start.
What are the limits of the review?
The checks depend on your Microsoft 365 subscription and the work we agree with you. We examine settings and records; the review doesn't include attempts to break into your systems or guarantee that every risk will be found. Your report explains what was checked, anything we couldn't confirm and where further investigation may help.
Putting advice into practice
Work with your existing IT provider.
Your existing IT provider can carry out the suggested changes. We give them clear recommendations and explain what progress to look for, so you can stay informed.
A review may also confirm that your protections are working well. If improvements are needed, you'll understand which ones matter and why.
Implementation support and ongoing advice are optional, separately agreed services. Any commercial relationships are explained before you decide.
Your review is led by Christian, who brings around two decades of IT support experience, including hands-on Microsoft 365 work and helpdesk leadership.
Meet ChristianStart with a conversation
Not sure your Microsoft 365 is being looked after properly?
Talk with Christian about your accounts, file sharing, email or work devices in a free 20-minute introductory call. We'll discuss what you need checked and whether this review would help.