I will audit your microsoft 365 and entra id security

No. Read-only and least-privilege access is preferred. Depending on the assessment scope, roles such as Global Reader, Security Reader, or Reports Reader may be sufficient.

The assessment is designed to be non-disruptive. I primarily review existing configurations and security settings rather than making changes to your production environment.

The standard service focuses on assessment and recommendations. Remediation and configuration changes can be discussed separately based on the findings and required scope.

Depending on the package, I can assess Microsoft Entra ID, Exchange Online, Microsoft Defender, Conditional Access, Intune, SharePoint, OneDrive, authentication, identity security, external access, and related Microsoft 365 security controls.

Yes. Large environments can be assessed, but the scope and pricing may require a custom order depending on the number of users, services, policies, and complexity.

Yes. I can review your Secure Score, identify relevant security improvement opportunities, explain their security impact, and provide prioritized recommendations.

Yes. Framework-aligned assessments can be discussed depending on your requirements, including CIS Controls and other commonly used security standards.

Yes, but an active compromise requires a different scope from a routine security assessment. Please contact me so the investigation can be appropriately scoped.