M365 Security Baseline Audit
Review of MFA, Conditional Access, admin roles, mail flow, Secure Score and device policies.
DeliverablePrioritized findings report and remediation plan
Service
Microsoft 365 & Entra ID security
Tenant hardening, MFA and Conditional Access, admin role review and Secure Score improvement, applied consistently across one tenant or many.
Also covered
Endpoint & email security
Sophos Central deployment and tuning, email protection and phishing-simulation rollout, and fixing conflicts between security agents and backup tools.
Fixed-scope packages
Tenant Hardening Sprint
Apply the baseline from the audit across one or more tenants.
DeliverableChange log and before/after Secure Score
Selected work
Endpoint & email protection rollout
Sophos Central deployment across clients, including a DNS-based mail routing workaround for single-tenant Microsoft Graph API limitations.
Hybrid Azure for many clients
Patch management and vulnerability remediation across Windows and Linux with BigFix, CrowdStrike Falcon and Rapid7, plus hybrid architectures connecting Azure to on-premises sites.
Tell me about your environment
Describe what you have and what you need. I reply by e-mail with questions or a proposal.