Microsoft Security Assessments
Identify security risks. Secure Microsoft environments with purpose.
How securely are your on-premises Active Directory and your Microsoft 365 environment, including Entra ID, actually configured? We analyse the relevant areas, make risks transparent and develop concrete, prioritised recommendations.
Tailored to your Microsoft environment.
Microsoft is in place. But how consistently is your environment secured?
Identity structures that have grown over time, insufficiently reviewed policies or unused protection features all add complexity. We create a sound technical baseline for improvement.
Structures that have grown over time
Permissions, policies and administration models have been extended over the years – without consistent review.
Untapped security features
Existing Microsoft security features are not always consistently configured or aligned with one another.
Unclear priorities
Without a reliable assessment, it remains unclear which risks should be addressed first.
Services
Two Security Assessments – matched to your infrastructure.
Choose between the assessment for your on-premises Active Directory environment and the Microsoft 365 Security Assessment, which explicitly includes Entra ID. Both assessments are available individually or combined; we agree the exact scope with you.
- 01
Active Directory Security Assessment
A review of your on-premises identity infrastructure, focusing on core AD configurations, privileged accounts, group policies, permissions and typical risks in domain structures that have grown over time.
- Privileged access and administrator rights
- Group policies and security-relevant configurations
- Identity and permission risks in on-premises AD
- 02
Microsoft 365 Security Assessment (incl. Entra ID)
A comprehensive review of your cloud identities and Microsoft 365 security configuration. Entra ID is an integral part of this assessment – not a separate offering.
- Entra ID: MFA, Conditional Access, roles, privileged access and identity protection
- Microsoft 365: Exchange Online, Teams, SharePoint and relevant protection policies
- Microsoft Defender, security configurations and prioritised improvements within the agreed scope
From technical findings to concrete decisions.
An assessment should not merely document conspicuous settings – it should lay the foundation for effective measures.
Structured findings
Traceable findings with a technical assessment and a description of their potential impact.
Prioritised measures
Recommendations ranked by urgency, effort and a sensible order of implementation.
Implementation roadmap
A pragmatic starting point for hardening, remediation and follow-on projects.
How it works
How an assessment works.
The process is tailored to your infrastructure, your requirements and the access available.
- 01
Scoping
We clarify goals, systems, the relevant people in charge and a sensible scope for the review.
- 02
Technical analysis
We review the agreed Microsoft areas against defined criteria and best practices.
- 03
Evaluation
We assess the risks and develop prioritised recommendations.
- 04
Results meeting
We discuss findings, quick wins and possible next steps.
Analysis is the beginning. Implementation makes the difference.
On request, we also support you with prioritisation, technical implementation and continuous improvement of the measures identified.
- Security hardening and remediation
- Introduction or optimisation of Microsoft security features
- Hands-on workshops with your IT team
- Ongoing managed services
Assessment or workshop – which fits your goal?
An assessment examines the actual state of your environment. A workshop builds shared understanding, concrete target pictures and implementation know-how.
Microsoft Security Assessments
A review of the current state, identification of risks and prioritised recommendations for your actual environment.
Microsoft Security Workshops
Expert, hands-on exchange with your responsible staff on specific Microsoft security topics.
FAQ
Frequently asked questions about the Security Assessment.
We clarify the key points with you in advance.
Do we need a complete Microsoft landscape?
No. You can commission the Active Directory Security Assessment, the Microsoft 365 Security Assessment including Entra ID, or both. Within each assessment, we agree the focus areas together.
Do we have to make changes to our environment?
The analysis is initially agreed as a review. Any changes are agreed separately.
How do we receive the results?
We discuss structured findings and prioritised recommendations; the exact scope of documentation is defined in advance.
Can you also help with implementation?
Yes. Hardening, technical implementation and accompanying workshops can be agreed as follow-on services.
Contact
Let’s talk about your Microsoft security.
In a short call, we clarify your starting point, the right scope of services and the most sensible next steps.
Introductory call
No obligation, with a technical contact and a concrete focus on your Microsoft environment.
Request service information
Receive information on the scope of services, possible approach and typical results.