Free self-check

How exposed is your Microsoft 365?

Eight questions, two minutes. No email needed.

  1. 1. MFA is enforced for every administrator account.
  2. 2. Legacy authentication is disabled in Microsoft 365.
  3. 3. A named person or team reviews risky sign-in alerts.
  4. 4. Someone is accountable for security alerts outside business hours.
  5. 5. External mail forwarding rules are reviewed regularly.
  6. 6. Third-party app permissions in Microsoft 365 are reviewed.
  7. 7. You can show an insurer or client who monitors and responds.
  8. 8. Backups have been restored in a test within the last year.

Answer all 8 questions to see your result. Answers stay in your browser.