Microsoft 365 Security Baseline Implementation
The Cloud Security Baseline implements the foundational Microsoft security configuration that every organisation should have in place before anything else. MFA enforcement, Conditional Access policies, Microsoft Defender for Microsoft 365, and Intune device compliance. Policies are tested in report-only mode before enforcement so there are no surprises. Everything is configured, documented and handed over with a review session.
What we assess
- MFA enforcement for all users, including break-glass account configuration
- Conditional Access policy design and implementation
- Policies deployed in report-only mode, reviewed and confirmed before enforcement
- Legacy authentication protocols blocked
- Microsoft Defender for Microsoft 365: baseline configuration
- Safe Links and Safe Attachments policies
- Anti-spam and anti-phishing policy configuration
- Microsoft Intune: device compliance policy implementation
- Entra ID security defaults review and configuration
- Privileged account audit and admin role cleanup
- Microsoft Secure Score baseline measurement and improvement plan
- Configuration documentation and handover
- Post-implementation review session
What you get
Foundational security controls in place
The controls that prevent the most common Microsoft 365 attack vectors - account compromise, phishing and unmanaged device access - are configured, tested and enforced. Not just switched on, but verified to work.
Documented configuration
Every policy and setting is documented in a handover pack. Your team, MSP or successor can understand what was configured and why, what each policy does and how to maintain it. Not a black box.
Measurable starting point
Microsoft Secure Score is measured before and after. You have a baseline from which to demonstrate improvement to leadership, auditors or cyber insurance underwriters, and a reference point for ongoing governance.
Investment
From $4,500
Fixed price. Scope confirmed after review of current environment state.
Next steps
Common questions
Ready to get started?
Book a no-obligation Cloud Review. We will assess your environment and identify where cloud, security and automation can remove friction from your operation.
No sales script. Initial conversation is obligation-free.