Microsoft 365, rebuilt around your security requirements.
Assessment and implementation in one package. We benchmark your Microsoft 365 environment, tell you what to fix now and what can wait, then build the new policies in your tenant so you can test, tweak and roll them out.
- Includes
- A full M365 security assessment
- Benchmark
- CIS, across nine domains
- We build
- Policies in your tenant
- Rollout
- Test and pilot groups first
What makes it different
A partner, not just a report.
Microsoft 365 security is complicated for most teams. We do the assessment, then the hands-on work that turns its recommendations into real security gains.
Licensing
Use what you own first.
We demystify licensing and unlock what you're paying for before recommending any new spend.
Benchmarks
Practical, not theoretical.
Your tenant benchmarked against CIS across nine domains, turned into a roadmap of quick wins and high-impact changes.
Deployment
Value from day one.
We build and pilot the key policies with your team, with minimal disruption.
Client results
About ten questions, answered.
“Learning we already had enterprise-grade EDR/XDR without needing more licenses was one of the highest-value moments.”CISO, M365 Security Implementation client
“This assessment answered about 10 questions I'd been carrying around. The timing was perfect: it landed exactly when we needed clarity to move forward.”
Our approach
From discovery to deployment.
We start with what you're trying to achieve, benchmark your environment, recommend the right licensing, then build and verify the fix with you.
- 01
Assessment interview
Your business needs, desired secure state and compliance requirements, plus built-in tools you can switch on right away.
- 02
Licensing assessment
Written recommendations with cost/benefit by license level.
- Outcomes by license level
- Use what you own before buying more
- 03
Platform assessment
Your tenant benchmarked against industry standards across nine domains.
- Admin accounts and app permissions
- Entra ID, email and transport rules
- Devices, data and storage
- 04
Findings and roadmap
Fix now versus fix later, documented and presented live to leadership and technical teams.
- 05
Deployment
Policies created with you, piloted, monitored and adjusted.
- Email encryption and sharing controls
- Intune device access and compliance
- Windows baseline, EDR, ASR rules
- Anti-phishing, LAPS, privilege management
- 06
Verify and hand over
The result re-benchmarked and tracked against Secure Score, with your team shown how to keep it there.
What is changing
NYDFS now requires MFA everywhere and a formal asset inventory. Sections 500.12 and 500.13 took effect November 1, 2025. See how our data governance process builds the inventory.
What you get
M365 Security Implementation deliverables.
Concrete artifacts you keep, not a slide deck that disappears after the readout.
- 01
Licensing summary
Business outcomes delivered by each license level.
- 02
Cost/benefit analysis
What each option costs against what it gives.
- 03
Security gap findings
Gaps documented against industry benchmarks.
- 04
Recommendations
Fix now versus fix later, clearly ranked.
- 05
Deployed policies
Built, piloted and validated in your tenant.
- 06
Findings presentation
Current state, risks and roadmap, presented live.
Runs on one risk language
Scored with your methodology.
Every finding is scored the same way as the rest of your program. Already have a methodology? We use it. If not, we build it with you first, in a single workshop.
How we build a risk methodology →Connected services