Microsoft 365 and Google Workspace
Microsoft 365 security hardening
Most small business Microsoft 365 accounts are still on the settings they had the day they were created. I go through your tenant one area at a time: who has admin rights, how people sign in, how email is protected, and what can be shared outside the business. You end up with a setup that is much harder to break into, and a plain-language summary of every change.
What is included
- A review of who has admin rights, plus a sealed emergency admin account in case you are ever locked out
- Multi-factor authentication (MFA) for every user, using Microsoft Authenticator with number matching
- Blocking old sign-in methods that skip MFA
- Conditional Access sign-in rules where your licence includes them
- Self-service password reset so staff can get back in without calling anyone
- Email signing (DKIM) and anti-spoofing guidance for your domain
- Microsoft's recommended protection for phishing, malware and dangerous attachments
- Tagging outside email and blocking automatic forwarding to personal addresses
- Audit logging and alerts, so suspicious activity leaves a trail
- Stopping staff from granting unapproved apps access to company data
- Sensible sharing settings for SharePoint and OneDrive
What you get at the end
- Every account protected by MFA
- Emergency admin account details stored safely and shared with you
- A list of who holds admin rights and what changed
- A one page, plain-language summary of the work and a short walkthrough
What I need from you
- Global Administrator access, or someone who can grant it
- Your licence type (I can check this with you)
- A 30 to 60 minute kickoff call
Not included
- Enrolling and managing devices in Intune (see Device security)
- Data loss prevention and sensitivity labels
- 24/7 monitoring (ask me about an introduction to a managed security provider)
Related reading
Business Email: Buy From Microsoft or Google, Not Your Host
Free or reseller email works at first. Here is what you give up in control and security, and why setting up Microsoft 365 or Google directly saves pain later.
Read article
Turn On MFA: A Small Business Guide, App by App
Why MFA matters, which kind to pick, and where to switch it on in Microsoft 365, Google Workspace, Slack, HubSpot and other small business apps.
Read articleReady to get this done?
Answer a few quick questions and book a short call. I will come prepared with a plan and an estimate.