Baseline security
Two-step sign-in (MFA) for everyone, separate admin accounts, inactive account clean-up.
Service 04
Security and setup
Two-step sign-in (MFA), device management, mail and data protection, clean sharing. Step by step, without downtime.
For companies where Microsoft 365 works, but was never configured properly.
What we help with
Microsoft 365 works, but it was never configured properly: password-only sign-in, admin rights handed out, files shared via public links, laptops without encryption. A security project fixes it step by step, without downtime.
Outcome
A secure environment and documentation of every change.
What the service includes
Conditional Access
Sign-in only from company devices and countries where you operate.
Device management
A lost laptop is locked remotely, a new one sets itself up.
Email domain security
Nobody can send fraudulent email in your name.
SharePoint and Teams structure
Every file has its place, only the right people have access.
Sensitive data protection
Personal IDs and confidential documents don’t leave by mistake.
Backup
Restore deleted or encrypted data in minutes.
Post-turnover clean-up
Take over data and access of everyone who left.
Copilot readiness
So Copilot doesn’t show staff their colleagues’ salaries.
How it works
- 1
We start from an audit or a quick health check.
- 2
We propose changes and their order, including the impact on staff.
- 3
We set up emergency access so nobody can get locked out.
- 4
We prepare an announcement and guide for staff; you send them out.
- 5
We roll out gradually: a pilot group first, then everyone.
- 6
We verify, document and hand over.
What you get
- An environment configured to the agreed scope
- A log of every change with how to roll it back
- Staff guides: MFA, a new laptop, what to do if a device is lost
- Microsoft Secure Score before and after
What’s needed
- Microsoft 365 Business; Conditional Access, device management and data protection need Business Premium
- An admin who grants us the required roles temporarily
- A list of devices and systems that send email (printers, scanners)
Example scenario
Law firm, 12 people: everyone uses MFA, the partner no longer works under an admin account and case files can’t be shared via public links.
We work withEntra IDIntuneDefenderPurview
FAQ about this service
Could we lock ourselves out?
No. Before tightening anything, we set up emergency accounts. Changes are tried on a small group first, in a mode that only records who would be affected.
How will staff cope?
They get a simple guide in advance. Setting up MFA takes about five minutes, and we help anyone who needs support.
Do we need Business Premium?
Basic security works with any Business edition. Conditional Access, device management and sensitive data protection need Business Premium. A licence audit shows what pays off.
Want to know if it pays off for you?
20 minutes online. No preparation, no commitment.
Book a 20-minute consultation