Microsoft 365 Tenant Check: Basic And Premium Compared
It can happen quickly in everyday life: new employees gain access to important documents without official approval. Admin accounts run without multi-factor authentication (MFA). The old administration is long gone from the company, but their accounts are still active. Entire departments have full access to shared mailboxes, even though only three people need access to them.
A Microsoft 365 Tenant Check is therefore essential. It answers the question of whether your M365 environment is being operated in a way that you can and must justify from a security and compliance perspective. The AM GmbH offers you the Tenant Check in Basic and Premium versions.
Which Tenant Check Is Right For Your Company?
We will work with you to determine which check should be performed. Based on this analysis, we will recommend whether a Basic Check is sufficient for an initial status quo assessment or whether a Premium Check offers the necessary depth. This allows your Microsoft 365 environment to be specifically checked for security and compliance. The following factors are decisive in this regard:
- Has your environment already been checked?
- When was the last tenant check performed?
- Have you recently migrated to Microsoft 365?
- Are there any new compliance requirements?
- Is an audit planned?
M365 Tenant Check Basic vs. M365 Tenant Check Premium
An M365 tenant check is not a one-time measure, but part of an ongoing security and compliance process. As threats and regulatory requirements continue to evolve, we offer a Basic Check and a Premium Check. This ensures that your company receives exactly the level of scrutiny that is currently required.
The M365 Tenant Check Basic For Greater Security And Configuration
The Basic Check acts as an “early warning system” for your Microsoft 365 tenant. It focuses on critical gateways that are often overlooked in the hectic day-to-day IT environment. The focus is on securing identity and access management and protecting against data leakage due to misconfigurations. You can think of the M365 Tenant Check Basic as an inventory of your existing IT systems.
- Identity and access security, such as MFA and admin accounts
- External sharing in SharePoint, OneDrive, and Teams
- Fundamentals of data security and retention policies
- Email security, such as malware protection
- Basis of your compliance policies, such as audit logs
The M365 Tenant Check Premium: 360° Analysis For Governance And Compliance
While the Basic Check primarily reveals acute vulnerabilities, the M365 Tenant Check Premium analyzes your Microsoft 365 environment in much greater depth. It is a comprehensive 360° analysis that compares technical settings with your governance and compliance requirements (such as NIS2 or ISO 27001).
- Permissions and roles with a focus on least privilege
- Governance structures for teams and lifecycle management
- Device and endpoint management, conditional access
- Security features such as identity protection
- Monitoring and alerting, for example SIEM
- Industry-specific compliance according to NIS2, ISO 27001, and GDPR
Procedure For An M365 Tenant Check
Consulting
Together, we will determine which M365 tenant check is appropriate for your company. In doing so, we will take previous checks and acute incidents into account. During our consultation, we will also look at new requirements.
Analysis Of Your Microsoft 365 Environment
We work with your IT team to collect the relevant data. Much of the information can be evaluated directly via admin portals and reports. With Microsoft 365 Tenant Check Premium, we supplement this basis with further analyses.
Evaluation & Prioritization
We evaluate the results of the tenant check based on best practices and benchmarks. We then prioritize the identified risks and measures according to relevance and urgency.
Report & Discussion
Finally, we discuss the results together. You receive a structured report with an action plan. On request, we can supplement this with a roadmap for your company's IT.
