Overview

Mirai Security will provide a current state assessment of security controls in the Microsoft 365 environment. The environment will be assessed against the Center for Internet Security (CIS) Benchmarks for Microsoft 365 configuration guidelines. The results of this assessment will be used to develop a set of prioritized remediation actions based on your business goals and risk tolerance.

With our security expertise and deep understanding of the threat landscape, we will highlight the most critical risks for your organization aligned with your business values.

We are Microsoft 365 certified experts, we will help you have clear recommendations to drastically improve your security posture.

We eat and breathe Microsoft products, we will verify you get the most use out of your current licenses.

Approach

This assessment includes the following:

Environment and Access Configuration

A project kickoff meeting with stakeholders to review and agree on:

• Identify stakeholders and contacts,
• Request any relevant documentation to review,
• Request read-only access to the Microsoft 365 environment.

Microsoft 365 Assessment and Reporting

Mirai’s consultants will conduct stakeholder interviews, review the configuration of the Microsoft 365 environment, and develop a tailored set of recommendations to improve the security posture and increase the utilization of existing security features.

• Perform manual verification combined with automated testing where appropriate,
• Analyze results and map these to the CIS Benchmarks configuration guidelines for Microsoft 365,
• Analyze findings and identify associated risks and impacts,
• Report findings and prioritize recommendations in draft report.

Validation of Project Goals

The final phase of this assessment is designed to ensure that all project objectives have been met and that the client is satisfied with the value delivered by Mirai Security’s project team.

• Delivery of a presentation of findings to the stakeholders to validate that the project achieved its strategic and tactical objectives,
• Revision of Microsoft 365 Security Assessment Memorandum based on feedback.

The client will receive the following deliverables:

• A Report of findings and recommendations,
• The list all technical controls and recommendations in a separate document.

Learn more

• Microsoft 365 Security Assessment
• About Mirai Security