
Microsoft 365 Configuration Review
This service reviews your Microsoft 365 configuration to identify any potential flaws and weaknesses within your organisation. We base our review on Level 1 of the Centre for Internet Security (CIS) Microsoft 365 Foundations Benchmark. This benchmark contains a series of suggested settings to increase security within the Microsoft 365 environment above what is provided by default without adding additional complexity to the user experience. It covers a broad range of checks for appropriate security policies that cover account and authentication, data management, application permissions, storage, and other security policy areas.
Please note: to conduct this testing, we require two user accounts with the “Global Reader” privilege in order to view the settings of your Microsoft 365 environment.
Who should get a FSWA?
Any business with a Microsoft 365 instance.
What are the benefits to my business?
- Clear understanding of the current security controls in place within your M365 instance
- Ability to make a risk based decision about changing any of these controls to suit your business’s needs
- Plain language report which is accessible to all
- Opportunity to discuss your review with our cyber professionals.
How much does it cost?
Each service we offer is tailored to suit the needs of the business we are working with.
Email [email protected] to set up an initial discussion with one of our Cyber PATH team members and receive a free, no obligation quote.
Book a call with our team or send an enquiry
Other Vulnerability Assessment Services

FIRST STEP WEB ASSESSMENT
This service provides you with an initial assessment of your website to highlight its most pressing vulnerabilities, focussing on the reconnaissance stage for the site. FSWA is considered an initial light touch assessment of the website compared to the complete Web App Testing service offered.

INTERNAL VULNERABILITY ASSESSMENT
The service will scan and review your internal networks and systems looking for weaknesses such as poorly maintained or designed systems, insecure Wi-Fi networks, insecure access controls, or opportunities to access and steal sensitive data.

WEB APPLICATION ASSESSMENT
This service assesses your website and web services for weaknesses. The service reporting will describe in plain language, what each weakness means to your business and the risks associated with each. Service reporting will include plans and guidance on how to fix those weaknesses.

EXTERNAL VULNERABILITY ASSESSMENT
Remote vulnerability assessments are focussed on identifying weaknesses in the way your organisation connects to the internet. Reviewing the connection through the lens of an attacker, this services highlights any vulnerabilities which may allow a criminal access to your internal network.