What is the Microsoft 365 Security Tune-Up?
The Microsoft 365 Security Tune-Up is a review of how your Microsoft 365 tenant is actually configured. It ends in a ranked list of specific settings to change, with the reasoning for each.
For most small businesses, Microsoft 365 is the center of the company. Email, files, calendars and sign-in all live there. A single compromised account can expose all of it, and attackers know it.
Default settings are not built for that threat. Secure Score suggests changes, but it does not tell you which ones matter for your business or how to make them without locking people out.
The Tune-Up reviews how your tenant is actually configured. You get a ranked list of changes with the reasoning behind each, written so your IT provider can act on it. We can walk them through the changes, or leave them to it.
Who needs it?
- Any business that runs email, files and sign-in on Microsoft 365
- A company whose tenant was set up quickly and never reviewed
- A business that wants a second opinion on its MSP's configuration
- A team preparing for a cyber insurance renewal
What problems does it address?
- A tenant set up quickly and never reviewed
- Legacy sign-in methods that bypass multi-factor authentication
- Mailbox forwarding rules nobody remembers creating
- Files shared outside the company without anyone deciding to
- Secure Score recommendations with no sense of which ones matter
What we assess
- Entra ID sign-in settings and multi-factor authentication
- Phishing-resistant MFA where it makes sense for your users
- Conditional Access policies and gaps in them
- Privileged and administrative accounts
- Legacy authentication that bypasses MFA
- Exchange Online, mailbox rules and forwarding
- External sharing in SharePoint and OneDrive
- Microsoft Defender configuration
- Audit logging and retention
- Break-glass accounts
- Secure Score, and which recommendations are worth acting on
What you receive
- A written review of your tenant configuration
- Findings ranked by risk and effort
- Specific settings to change, with the reasoning for each
- A short list of changes your IT provider can make this week
- A walkthrough of the results with whoever manages your tenant
What happens afterward?
You decide what to do with the findings, and with whom. Your team or IT provider can carry them out, with Avertix guiding the changes and retesting them if you want, or you can keep senior help on hand through an advisory arrangement. Many clients stop after the report.
How the engagement works
Free consultation
A 45-minute call with a senior consultant about your situation. It is a conversation, not an assessment. You leave with a recommended next step.
Scope and price
Scope, deliverables and price are agreed in writing before any work starts.
Assessment
The consultant who scoped the work does it. Requests to your team stay small, and we work with your IT provider where you have one.
Findings and walkthrough
You get a written report and a walkthrough. Findings are ranked, so you know what to do first and what can wait.
