Microsoft 365 Audit
Diese Seite ist auch auf Deutsch verfügbar.
Microsoft 365 is the productivity backbone of most modern organizations — Exchange Online handles email, Teams drives collaboration, SharePoint stores documents, and Entra ID manages identities. A misconfiguration in any of these components can expose sensitive data, enable phishing attacks, or allow unauthorized access to company resources.
This audit reviews the security configuration of your Microsoft 365 tenant using a read-only account. It is typically performed as a white-box engagement and scoped in a kick-off call. It is a natural complement to an Entra ID Audit, which focuses specifically on identity and access management.
Scope
The following areas are reviewed as part of a Microsoft 365 Audit:
- Exchange Online: anti-phishing policies, SPF/DKIM/DMARC configuration, mail transport rules, connector security, external email warnings
- Teams and SharePoint: external sharing settings, guest access policies, document permission review
- Microsoft Defender for Office 365: policy configuration, Safe Links, Safe Attachments, threat protection settings
- Admin roles and MFA: review of global admins and privileged roles, MFA enforcement for admin accounts
- Microsoft Secure Score: review of current score and highest-impact recommendations
- Conditional Access: review of policies protecting M365 applications
Why
- Microsoft 365 environments are a prime target for attackers — phishing, business email compromise (BEC), and data theft typically exploit misconfigurations rather than software vulnerabilities
- Default Microsoft 365 settings are not hardened — many organizations run significant gaps without knowing it
- A compromised M365 tenant can expose all company email, files, and credentials
Why VidraSec 🦦
My focus on Windows, Active Directory, and the Microsoft identity stack extends naturally into Microsoft 365. The Entra ID and M365 layers are tightly integrated — understanding one requires understanding the other. This audit is often combined with an Entra ID Audit for a complete picture of the Microsoft identity and productivity environment.
Typical Duration
3–5 days (reporting included; scope-dependent)
Typical Price
from 7,000 €
The final price depends on the scope of the project and the maturity level of your IT security. It is calculated individually based on the required effort.
Deliverables
Every engagement includes:
- Written findings report with all identified misconfigurations, prioritized by risk
- Management summary tailored to your audience (technical or executive)
- Live debriefing to walk through findings and answer questions
- Retesting after remediation available on request
See example reports to get a sense of what a VidraSec report looks like.
Compliance
Relevant for organizations working towards NIS2, ISO 27001, or TISAX compliance. Microsoft 365 security configuration is increasingly audited as part of information security management reviews.
martin@vidrasec.com | +43 670 3081275 | +43 670 3081275 | Book appointment |