Blue Heron Digital Services, LLC · IT, cloud, and security

Microsoft 365 Security Hardening check

A free estimate from your answers, plus optional public DNS for SPF, DKIM, and DMARC. Not a Microsoft service, not a certification, and not a guarantee.

Is multifactor authentication on for users and for admin accounts?
Do admins sign in through a conditional access rule, not only a password?
Is legacy authentication blocked?
Are admin roles limited to the people who need them?
Does someone look at Microsoft Secure Score on a regular schedule?
Is external sharing limited to what the business actually needs?
Is mailbox auditing turned on?
Are Defender or Purview protections in use for mail and files?
Is Microsoft 365 mail and file data backed up outside the tenant?