- IT Solutions
- Cybersecurity
- Microsoft 365 Security
Make sure your Microsoft 365 environment is—and remains—well-secured
Microsoft 365 offers a variety of ways to secure your users, email, and business data. But those security settings aren’t automatically configured optimally, and your environment is constantly changing.
With M365 Baseline we bring your Microsoft 365 environment up to a consistent security standard.
With M365 Control we then monitor whether your configuration continues to meet that agreed-upon standard.
This way, we not only lay a solid foundation, but also ensure that it is properly followed up on.
Why your Microsoft 365 configuration is i
Many security features are already included in Microsoft 365, but they must be configured correctly to work properly. In practice, Microsoft 365 environments are often initially set up to allow employees to send emails, share files, and use applications. As a result, security settings are not always configured completely or consistently.
What’s more, your surroundings are constantly changing. Settings are adjusted, permissions are granted, or restrictions are temporarily relaxed. Without further monitoring, your configuration may therefore deviate from the original security standard over time.
That’s why we take a two-step approach: first, we lay a solid foundation for security, and then we make sure it remains solid.
M365 Baseline
Check and configure security settings
M365 Control
Monitoring configuration and following up on deviations
M365 Baseline
Set a consistent standard for your Microsoft 365 security
With M365 Baseline, we first assess the current configuration of your Microsoft 365 environment. We compare that configuration with our security standard, identify any discrepancies, and then implement the agreed-upon changes.
In doing so, we examine five key areas within your Microsoft 365 environment: identity and access, email security, data sharing, auditing and logging, and administrative access.
What does the M365 Baseline process involve?
1
Intake & analysis
2
Configuration
3
Documentation
4
Transfer
1
Intake & analysis
We’ll assess your current Microsoft 365 configuration and compare it to our security standards. You’ll first see the discrepancies before we make any changes.
2
Configuration
We are implementing the agreed-upon security settings. Whenever possible, we first test what impact a setting will have before enforcing it.
3
Documentation
You will receive a technical document detailing the settings and exceptions that were applied. We also provide documentation for employees in which we explain, in plain language, what is changing and how it will affect them.
4
Transfer
We’ll discuss the results and any outstanding issues with your IT manager.
Which parts of Microsoft 365 will we be taking a closer look at?
Identity & access
MFA (multi-factor authentication) is set up for every user, and outdated login methods are blocked.
Email security
We configure the available security measures against phishing, malware, and malicious emails. Where the license permits, we also use Safe Links and Safe Attachments. In addition, we restrict the automatic forwarding of emails to external addresses.
Data sharing
Clear limits are set for the external sharing of company information. To do this, we’ll configure the settings for external sharing, guest access, and file sharing via links.
Audit & logging
Microsoft 365 is configured to log activity within your environment. That way, you can check later to see what happened if necessary.
Administrative access
We review administrator roles and restrict permanent administrative privileges. Where permitted by the license, administrative access is granted on a temporary basis when necessary.
You'll also see what has been changed
M365 Baseline does not stop during the configuration process. We document which settings were applied, which exceptions were agreed upon, and what will change for your employees.
You’ll also receive an overview of which CyberFundamentals Basic measures within Microsoft 365 are covered by the program. This will give you a clear understanding of how M365 Baseline contributes to your broader security strategy.
Do you also use a local Active Directory?
With our Active Directory Assessment , we investigate potential security risks in your on-premises Active Directory and any integration with Microsoft Entra ID. You’ll receive a concrete improvement plan with clear priorities.
M365 Control
Make sure your Microsoft 365 configuration remains intact
A Microsoft 365 environment is constantly changing. A setting is adjusted, an exception is made, or someone is granted additional rights. Changes like these are sometimes necessary, but they can also cause your environment to gradually deviate from the agreed-upon security standard.
That’s why M365 Control periodically and automatically compares your Microsoft 365 configuration with the agreed-upon baseline. If a deviation is identified, it can be corrected after review or recorded as an approved exception.
What exactly does M365 Control do?
Regularly check your configuration
Your Microsoft 365 configuration is periodically and automatically compared to the agreed-upon security standard. Nonconformities are detected automatically, so you don’t have to wait until the next audit to identify them.
Monitoring deviations
Any deviation from the settings will be corrected to the agreed-upon baseline after review or documented as an approved exception. This way, you can keep your configuration under control without accidentally undoing your deliberate choices.
Record exceptions
Every agreed-upon deviation is recorded, including the reason for it. That way, a specific exception does not keep cropping up as a problem that needs to be investigated.
Keeping documentation up to date
Changes to your Microsoft 365 configuration are also updated in the documentation. That way, it remains consistent with the actual situation.
Annual srcurity Review
Every year, we reassess your environment against the security standard in effect at that time. You will receive a report with prioritized recommendations.
Keeping pace with security standards
If Microsoft releases a new security control or if Office IT tightens the security standards, that change will be incorporated into future monitoring. This ensures that your Microsoft 365 configuration remains up to date with the latest security standards.
Automated monitoring, followed up by our team
Your configuration data is automatically collected and checked 24/7. Our staff will follow up on workdays between 7 a.m. and 6 p.m.
If an anomaly is detected outside those hours, it will be addressed starting the next business day. Findings and follow-up actions are always recorded in the file.
Our security solutions as part of your NIS2 strategy
NIS2 calls for a comprehensive approach to cybersecurity, incorporating both technical and organizational measures. With M365 Baseline and M365 Control, we help you properly configure the security settings for your Microsoft 365 environment and monitor any deviations.
In this way, Office-IT helps you strengthen your organization’s digital resilience and implement the relevant security measures that are important under NIS2.
Want to set up your Microsoft 365 security properly and keep it up to date?
We’ll take a look at how your Microsoft 365 environment is currently configured and identify areas for improvement. With M365 Baseline, we’re setting a fixed standard for security settings. With M365 Control, we can then ensure that your environment continues to meet that standard.
We didn’t even consider any other solution. We rely on Office-IT’s expertise.
Giardino - Garden Trade International
Bilzen - Hoeselt