Microsoft has created the most powerful suite of collaboration products in history. Easy to purchase, fairly simple to implement and learn. In doing so Microsoft (and subsequently you) have become exposed to the largest threat landscape on the planet. Microsoft invested in improving its security because of this change. This is great news is for most companies, but what you may not know is these security tools need to be implemented in order to achieve their full potential. Simply put, having a working Office 365 environment doesn’t mean your data is automatically protected. Every company needs an Office 365 Hardening Review.

The Hardening Review is designed to be a quick cost-effective, deep dive into Office 365 to identify risks and discuss how these risks can be managed or transferred. At a fixed fee, we will review and discuss the benefits of the following:

Microsoft 365 security administration

Auditing capabilities within Microsoft Office 365 and advisory on Audit Log Searches Security best practices, including:

ATP (Advanced Threat Protection) Safe Links and ATP Safe Attachments, (Requires ATP Plan 1)

Azure Advanced Threat Protection (ATP) is a cloud-based security solution that leverages your on-premises Active Directory signals to identify, detect, and investigate advanced threats, compromised identities, and malicious insider actions directed at your organization.

AIP (Azure Information Protection) Email Encryption

Azure Information Protection (sometimes referred to as AIP) is a cloud-based solution that helps an organization to classify and optionally, protect its documents and emails by applying labels. Labels can be applied automatically by administrators who define rules and conditions, manually by users, or a combination where users are given recommendations.

Azure AD Multi-factor Authentication (MFA)

Azure AD Multi-factor authentication is a process where a user is prompted during the sign-in process for an additional form of identification, such as to enter a code on their cellphone or to provide a fingerprint scan.

Option A also includes:

Mailbox auditing
Demonstration of Alert policies
Demonstration of Secure Score
Cloud Application Security
Address GLBA and GDPR concerns where required
1-hour advisory and Q&A to review and answer any questions related hardening recommendations
Cloud Application Security

Investment: $750 for companies with less than 100 users

Office 365 security is complex and changing weekly to keep pace with the security threat landscape. Hardening of Office 365 services is an essential risk reduction activity for any company. This service provides hardening of security approach of the following items if available in your Office 365 subscription:

MFA (Multi-Factor Authentication) (Assumes MFA is implemented and in use currently)
Office 365 Message Encryption – Requires Exchange Online P2 (included in E3)
Email Forwarding Block
Audit Log Search
Mailbox Auditing
Block unmanaged applications
Configure Expiration for external sharing links
Enable SharePoint versioning
Block external domains in Teams/Skype
Enable Self Service Password Reset – Requires AAD P1
May require an Azure AD Migration Project

*** This project requires: Office 2016 ProPlus or higher. Hybrid scenarios may affect the price. Prices based on 50 Users or less. Recommended: Minimum of Office 365 E3 Licensing and EMS (Enterprise Mobile Security)

Investment: As low as $1500 for companies below 100 users.

MICROSOFT OFFICE 365 HARDENING SERVICES

OPTION A: MICROSOFT OFFICE 365 HARDENING REVIEW