Access and security audit
Who can access what, former staff accounts, two-step sign-in (MFA), external sharing.
Service 01
Assessment
A read-only audit of access, licences and processes. You get a clear picture of your environment and a recommended next step.
For companies that don’t know the real state of their Microsoft 365.
What we help with
Owners often don’t know who can access what, which licences they pay for needlessly and where people lose time on manual work. The assessment finds out without a single change to your environment.
Outcome
A report for the owner: findings by risk, what they mean and what to do.
What the service includes
Licence audit
What you pay for needlessly and which licence mix makes sense. Often pays for itself.
Process audit
Where people spend time on manual admin and what to automate first.
Full assessment
All three audits in one report, plus a 3–6 month plan.
How it works
- 1
A consultation to confirm the scope: which audit, the date, a contact person.
- 2
You sign the order, the NDA and the access consent.
- 3
Your admin creates a read-only account (Global Reader). We send exact 5-minute instructions.
- 4
We review settings, accounts, sharing, licences or processes. We never open mail or files.
- 5
We prepare an owner’s report: findings by risk, what they mean and what to do.
- 6
We walk you through the results, remove our access and send you a confirmation.
What you get
- An owner’s report with a one-page summary
- Findings ranked by risk with recommendations and effort estimates
- A confidential appendix with account and settings lists for your admin
- For the licence audit, monthly and annual savings
- For the process audit, automation candidates with estimated hours saved
- A proposed next step, no commitment
What’s needed
- Microsoft 365, any edition
- An admin who creates the read-only account
- A list of current employees (names are enough) to spot accounts of people who left
- For the process audit, 60–90 minutes with the owner and short interviews with 2–3 people
Example scenario
Accounting firm, 18 people: the audit found 4 active accounts of people who had left. One was still forwarding company mail to a private Gmail.
We work withEntra IDExchangeSharePointSecure Score
FAQ about this service
Will you see our mail or documents?
No. The Global Reader role can read settings, not the content of mail or files. We work only with configuration data, such as who can access what.
Do we need to install anything?
No. You create one account without a licence. Afterwards you delete it and we send a confirmation.
What if the audit finds something serious?
Signs of compromise, such as mail forwarded to an outside address, are reported by phone right away, not in the report. We change nothing ourselves; we recommend the immediate step.
Want to know if it pays off for you?
20 minutes online. No preparation, no commitment.
Book a 20-minute consultation