Microsoft Defender for Office 365 security assessment: 1-Day Assessment

By this offer, we will use the “Office 365 Advanced Threat Protection Recommended Configuration Analyzer” (ORCA) to scan your organizations mail environment for mail security best practices and provide you with a detailed report on the current state of your environment and recommended actions to increase mail security.
The scan includes the following security checks:

• Anti-spam settings configured
• SPF records
• DKIM configuration
• Safe-attachments and safe-links configuration
• Configured Transport rules
• Currently set tenant settings
• Microsoft Defender for Office 365 policies
• Quarantine policies
• Malware filter policy
• Zero hour autopurge
• Enhanced filtering
• Anti-phishing policies
• Protection alerts

Prerequisites

• Client with access to the Exchange Online environment via PowerShell.
• Account with at least Organization Management role assigned.
• For environments with Bastion Server, the ORCA module must be installed.
• Local Admin rights required for the installation of the ORCA module.

Delivery and Action Plan
We connect remotely to the client you provide and ensure that all the necessary requirements are met. The analysis is then started and the review begins. We prepare the results accordingly so that we can address the points together with you in a two-hour workshop. Based on our experience, we recommend that representatives from the Cybersecurity and Exchange departments participate in the workshop.

Outcome and Review
This offer comprises an assessment of all Defender for Office 365 settings in a tenant. The settings will be compared against Microsoft's best practices and recommendations. Following this comparison, the current state will be evaluated. The outcome will be delivered as a document containing all current settings with description and all recommendations and best practices from Microsoft.

Please note, that the recommendations are based on Microsoft best practices and may not apply for all environments. For a tailored set of recommendations, a workshop is required with the client to analyze it´s environment and design a unique action plan for Defender for Office 365 settings.