Securing Microsoft 365 according to Best Practice: 2-Month Consulting Service

Online security is a top priority for organizations. Microsoft 365 for Business offers an affordable solution to enhance productivity, improve business security, and reduce costs. IT Partner assists businesses in creating, implementing, and managing cybersecurity tools and processes. Our experts provide guidance on implementing endpoint detection and response in your security architecture.

Our goal is to configure your tenant-wide settings to increase the security of your Microsoft 365 environment and protect sensitive data. The project is successful when core security features are enabled, and necessary configurations are performed for a secure environment.

IT Partner Responsibilities

1. Set up Multi-Factor Authentication. Choose the best MFA method based on security requirements:
   • Method 1: Enable and disable security defaults.
   • Method 2: Implement conditional access and related policies (Azure AD P1/P2 required).
2. Protect admin accounts:
   • Create a separate account for user management and a dedicated admin workstation based on roles and functions.
   • Configure admin accounts to limit global admins and their privileges.
   • Set up built-in roles for assigning permissions.
3. Use preset security policies for Microsoft 365 Defender:
   • Determine the profile and level of protection required for email and collaboration content.
   • Create and assign preset security policies to users.
4. Protect all devices:
   • Deploy Microsoft Defender for Endpoint.
   • Connect devices to Azure AD.
   • Set up managed devices using basic Intune configuration.
5. Implement Microsoft Teams for collaboration and sharing:
   • Create Teams for collaboration, set up meetings, and share files and videos.
   • Create a communication site and configure sharing settings for SharePoint and OneDrive.
6. Review and adjust sharing policies.
7. Train users on Office and Microsoft 365:
   • Conduct attack simulations for various scenarios.
   • Provide training for Office client applications and services.
8. Check and complete possible secure score recommendations.

Client Responsibilities

• Coordinate Client resources and staff schedules.
• Provide a dedicated point of contact for working with IT Partner.
• Configure all network equipment (load balancers, routers, firewalls, switches).
• Perform changes to internal and external DNS, as required.
• Review and approve engagement deliverables promptly.

Additional cost items not provided by the project:

1. Maintain your environment on an ongoing basis.
2. Additional licenses that may be required.

Prerequisites

• You must have a Microsoft 365 tenant with a global admin role.
• You must have access to your email domain DNS zone.
• Regular control and monitoring after implementation.

Plan

The plan may vary depending on your needs.

1. Kickoff meeting.
2. Scope check and current configuration assessment.
3. Configure and/or implement required services.
4. Secure score verification.

Success Criteria

• Enable MFA for all users.
• Review and implement changes to Microsoft 365 admin accounts following best-practices recommendations.
• Implement Microsoft 365 Defender policies.
• Connect required devices to Azure AD and manage them through Intune.
• Conduct end-user training.
• Implement Microsoft Teams as the company's communication and collaboration system.
• Adjust SharePoint Online and OneDrive sharing configuration.

Visit our Website

Call us at +1-855-700-0365

Email us at sales@o365hq.com

Schedule a call

Request a Call

Message via Teams