Exchange Online baseline score
How does Exchange Online measure up against Microsoft’s recommended protection baseline?
exchange · monthly
Intune baseline score
Is Intune configured the way Microsoft recommends, and are devices actually compliant?
security · monthly
Defender for Endpoint baseline score
Are this tenant’s devices onboarded to Defender, protected, and covered by policy?
security · monthly
Attack surface exposure score
What can an outsider, or a compromised vendor, use to get into this tenant?
security · monthly
Microsoft Secure Score
How does our configured security posture score, and what would move it most?
security · monthly
Third-party app consent
Which applications hold standing access to our data, and who let them in?
identity · monthly
Conditional Access policy inventory
What actually gates access to SharePoint and Exchange, and what slips past it?
identity · monthly
Sign-in risk & legacy authentication
Who is getting in without modern authentication, and from where?
identity · weekly
External auto-forwarding rules
Is anyone quietly forwarding company mail outside the organisation?
exchange · weekly
Defender alerts
What has Microsoft Defender flagged, and is anyone dealing with it?
security · weekly
Defender incidents
What investigations are open, and how long have they been open?
security · weekly
Managed device inventory
What devices are enrolled, who holds them, and are they still checking in?
identity · monthly
Device compliance policies
What are devices being held to, and is anything actually assigned?
identity · monthly