See what you get
A sample Microsoft 365 security report
A useful report should make the next decision easier. This example shows how we explain a finding, its importance and the action to consider.
1. A summary for the business owner
In this example, the first priorities are to check protection for administrator sign-ins and review links that allow access to files without signing in. We also found a possible licence saving, which needs checking against retention and subscription commitments.
The report separates urgent security decisions from routine improvements. It explains what was checked and what could not be verified. A high score alone does not mean an organisation is secure.
2. Findings you can act on
Example priority: review first
Confirm protection for administrator sign-ins
Example evidence: one administrator account is registered for an authentication method, but the evidence reviewed does not establish that an MFA policy covers every relevant sign-in.
Why it matters: registering an extra sign-in method and requiring it are different things. Administrator access can affect the whole organisation.
Recommended next step: ask the person responsible for Microsoft 365 to verify policy coverage, exceptions and emergency access arrangements. Agree and test any changes before applying them.
Owner: Microsoft 365 administrator. Completion evidence: documented policy scope and a successful controlled sign-in test.
Example priority: review next
Review files shared through unrestricted links
Example evidence: an externally shared folder allows access through an “Anyone” link. The review does not establish whether this was intentional.
Why it matters: someone may be able to forward that link beyond the intended recipient.
Recommended next step: the file owner confirms the audience and business need. The administrator then agrees suitable sharing settings, including how legitimate recipients will retain access.
Owner: file owner and administrator. Completion evidence: an approved sharing decision and an access check.
Example priority: planned improvement
Check a licence assigned to a former member of staff
Example evidence: a paid licence remains assigned after a person has left. Their mailbox or files may still be needed.
Recommended next step: check retention, ownership of files and the subscription commitment before changing the licence. A licence that is unused does not automatically mean the bill can be reduced immediately.
Owner: business owner and administrator. Completion evidence: a retention decision and a confirmed billing change, where one is available.
3. A practical action list
Each finding has a priority, proposed owner and a way to check completion. You choose whether your existing IT provider carries out the work or whether to ask us for a separate quote.
The audit is a review of Microsoft 365, not a penetration test, a Cyber Essentials assessment or a guarantee that every risk has been found. We record access limits and anything that needs further investigation.
What the real audit costs
£395 excluding VAT for up to 25 users. Larger organisations are quoted. We agree scope and read-only access before starting. You receive a written report; remediation is separate.
The audit fee is credited in full if you move to Managed or Secure support within 30 days. See the full audit scope and terms.
Delivery lead: Jeet Singh.