Microsoft 365 Security Checklist
Microsoft 365 is one of the most targeted business platforms in the world. Cyber criminals frequently target email accounts, administrator privileges and cloud services to gain access to sensitive business information.
Use this checklist to assess your Microsoft 365 environment and identify opportunities to strengthen security.
Request Free Microsoft 365 Review
Identity & Authentication Checklist
- Multi-Factor Authentication enabled for all users.
- Multi-Factor Authentication enforced for administrators.
- Legacy Authentication disabled.
- Passwordless authentication evaluated.
- Conditional Access policies implemented.
- Guest account access reviewed regularly.
- Inactive user accounts removed.
- Privileged administrator accounts minimised.
Email Security Checklist
- SPF record configured correctly.
- DKIM enabled.
- DMARC configured and monitored.
- Anti-phishing policies enabled.
- Safe Links protection enabled.
- Safe Attachments enabled.
- External forwarding rules reviewed.
- Shared mailbox permissions audited.
Microsoft Teams & SharePoint Checklist
- Guest access reviewed.
- External sharing restricted appropriately.
- Sensitive files protected.
- Data retention policies configured.
- SharePoint permissions reviewed.
- OneDrive sharing controls enabled.
- Data Loss Prevention policies considered.
Monitoring & Security Management Checklist
- Audit logging enabled.
- Security alerts configured.
- Sign-in activity monitored.
- Administrator activity reviewed.
- Microsoft Secure Score reviewed regularly.
- Incident response process documented.
- Backups and recovery procedures tested.
Microsoft 365 Security Score
| Completed Controls | Risk Level |
|---|---|
| 0 – 10 | High Risk |
| 11 – 20 | Moderate Risk |
| 21 – 30 | Good Security Foundation |
| 31+ | Strong Security Posture |
Need a Microsoft 365 Security Review?
Many organisations are surprised by the number of security weaknesses discovered during a Microsoft 365 review. A proactive assessment can identify vulnerabilities before they become incidents.
Book a free Microsoft 365 Security Health Check and receive practical recommendations tailored to your organisation.
Request Free Review