Microsoft 365 Security Review
A review of Microsoft 365 access, sharing, retention and audit records, with recommendations ranked by risk.
Send a message or email hello@teclara.tech
A close look at who can administer your Microsoft 365, how sign-ins are protected, what is shared through SharePoint and OneDrive, and what retention and audit records you have. It covers Entra ID, Microsoft’s sign-in and identity service, and Purview, its retention and audit tools. The recommendations are ranked by risk and show which fixes your current licences already cover.
On the first call we check this is the right project and talk about timing. You get a fixed price and a start date before any work begins.
- Duration
- 7 to 10 business days
- Type
- Review
What you get
Depending on the project, you get findings and recommendations, changes made to your systems, or both. The documentation is yours to keep, whatever you decide next.
Identity and access findings
A record of privileged role assignments, MFA enforcement, and stronger sign-in controls available under current licences.
Sharing permissions report
Company-wide, site and OneDrive sharing settings, including links that open without signing in.
Retention and audit findings
A review of Purview retention policies, eDiscovery holds, and the audit records available under current licences.
Prioritized recommendations and licensing requirements
Recommendations ordered by risk, identifying which changes existing licences cover and which require an upgrade.
Questions about timing or fit?
Project steps
Nothing in your systems changes until the tasks and access have been agreed with you.
Access and licences
The review starts with your licences, who administers what, and read-only access for us. Settings are checked against the CIS Benchmark for Microsoft 365, a widely used security standard.
Identity review
Admin roles, sign-in rules, guest accounts and older sign-in methods that can bypass MFA are checked.
Collaboration review
SharePoint and OneDrive sharing, sensitivity labels and the sites behind Teams are checked next.
Retention and licensing review
Retention, legal holds and audit history are checked, along with any licence changes the fixes would need.
Findings and next steps
You get written findings that show what to fix first, which decisions are yours, and any licence changes needed.
When this project helps
Administrator roles have not been reviewed
Security defaults or Conditional Access policies need assessment
External sharing and Anyone links have not been reviewed
Available audit records need confirmation for a client or insurer
Retention and offboarding responsibilities are unclear
Frequently asked questions.
What isn’t covered?
Detailed reviews of Defender (Microsoft’s threat protection), Intune (its device management) and Copilot are separate projects. Making the recommended changes is also separate, through Microsoft 365 Tenant Cleanup or Policy Implementation.
Not sure this is the right project?
A 15-minute call is the easiest way to check the fit, the access needed and the timing.