Microsoft 365 audit services
The Microsoft 365 tenant audit reviews how your tenant is configured across up to seven control areas. Each review below covers one area or one situation in depth, and the areas in your engagement are agreed during scoping.
The full audit
Every control area agreed during scoping, reported together with evidence and a prioritized roadmap.
Microsoft 365 tenant audit
The Microsoft 365 tenant audit checklist: what is reviewed in Entra ID, Conditional Access, Exchange Online, SharePoint, Teams, apps, logging, and data.
Reviews by area
One control area in depth: what Microsoft recommends, and what the review checks in your tenant.
Microsoft Entra ID security review
Independent Microsoft Entra ID security audit: MFA coverage, Conditional Access, privileged roles, and emergency access, checked against Microsoft guidance.
Conditional Access policy review
Conditional Access policy review for Microsoft Entra ID: exclusions, MFA gaps, legacy authentication, and emergency access, checked against Microsoft guidance.
Exchange Online email security review
Exchange Online and Defender for Office 365 security review: anti-phishing, SPF, DKIM, DMARC, external forwarding, and mail flow rules, with a fix order.
SharePoint, OneDrive, and Teams sharing review
Audit SharePoint, OneDrive, and Teams external sharing: sharing levels, Anyone links, guest access, and Teams external access, against Microsoft guidance.
Application consent and permissions review
Find which OAuth and third-party apps can reach your Microsoft 365 data: consent settings, high-privilege permissions, credentials, and owners, reviewed.
Audit logging and alerting review
Is your Microsoft 365 audit log on and kept long enough? A review of unified audit log status, retention, Entra sign-in logs, and who receives alerts.
Microsoft Purview data protection review
A Microsoft Purview review of sensitivity labels, DLP policies, and retention: what is configured in your Microsoft 365 tenant, and what to fix first.
Reviews by situation
The audit applied to a specific moment, such as preparing for Copilot or taking over a tenant.
Microsoft 365 Copilot readiness review
Microsoft 365 Copilot readiness assessment: find oversharing in SharePoint, OneDrive, and Teams, and check sensitivity labels and DLP before rollout.
Inherited Microsoft 365 tenant review
Took over a Microsoft 365 tenant after M&A or a provider change? Review who holds admin roles, which partners and apps have access, and if auditing is on.
Get a clear view of your tenant’s configuration.
Tell us about your environment and the questions you need answered. We’ll help define an appropriate assessment scope.
Discuss your audit