An overview for management and IT
The management summary describes the main risks and decisions. The technical findings give your IT team the reasoning behind concrete improvements.
Sustain
Cloud Security Review
A baseline review of your Microsoft 365 environment, followed by a reassessment every six months. That way you can see how your configuration evolves and where adjustments are needed.
- Who it is for
- Organisations that want the security of their Microsoft 365 environment checked on a regular basis.
- What you get
- A baseline review and two reassessments a year, with a management summary, findings and a prioritised action list.
- What we need from you
- Agreed read access, exports or a guided admin session. Your IT team or IT partner implements the improvements.
- Price
- On request. Standard: one tenant and one entity.
Result
Stay on top of changes in your cloud security
The baseline review maps the security of your Microsoft 365 environment. In each reassessment, we look at what has improved and which changes need fresh attention.
You receive findings and priorities for your IT team or IT partner. The review is a periodic assessment; implementing technical improvements remains their responsibility. We agree the scope and the access required in advance.
Scope
What we assess
The standard assessment covers one Microsoft 365 environment (tenant) and one entity, including mail and SharePoint.
- Year 1: baseline review and a first reassessment.
- After that, two reassessments per year.
- Multiple tenants, Azure, Google Workspace and other clouds can be added on request.
Within the agreed scope, we assess identity and access, e-mail, collaboration and data, devices and backup. We also check whether controls actually work: a setting that is switched on does not automatically protect you if exceptions or gaps in coverage limit its effect. You receive a management summary, findings and a prioritised action list.
In concrete terms
Every review leads to targeted follow-up
A prioritised action list
Each finding comes with a recommendation and a criterion to assess the improvement. We make clear what was established, what could not be assessed and which information is missing.
Clear view of progress and setbacks
In each reassessment, we check earlier improvements and new changes. Where scope and method allow, we compare results and update the priorities.
We work with agreed read access, exports or a guided admin session. Functional and recovery tests are scoped separately in advance. Between reviews, your IT team keeps monitoring the environment.
Want your Microsoft 365 security checked?
Tell us about your cloud environment and the questions you want answered. We agree the scope, the access required and the follow-up with you.