SkyNorth Environment Review & Security Assessment: 2-Weeks

This assessment is aimed at customers utilizing Microsoft cloud technologies who want to confirm their configuration and enhance Modern Security efforts pertaining to Azure and Microsoft 365. During the assessment we can explore optional cloud security products including Azure Sentinel, the Microsoft Defender Suite, and other features within Azure and Microsoft 365.

Scope Of Services:

• Microsoft 365 Environment • Microsoft Entra (Azure Active Directory) o Multi-Factor Authentication o Authentication Strengths o Conditional Access Rules o App Authentication (SSO) o Access Reviews • Application Security & Governance Controls o Exchange, OneDrive, SharePoint, Teams o External Sharing Configuration and Audit o Retention Policies o Expiration Policies • Auditing o Suspicious Logins o Service Principals o SIEM Integrations o Custom Developed Auditing Scripts • Device Management o Azure AD Join/Hybrid o Microsoft Intune o Microsoft Autopilot • Microsoft Purview (Data Management) o Data Loss Prevention o Microsoft Information Protection • Microsoft Secure Score Review

Over 100+ Benchmarks checked. Microsoft Best Practice and Recommendations

Assumptions:

• Client may need additional licensing to obtain objectives. • All work will be performed remotely over a secured connection. • Client will provide an Administrator account as required in Microsoft 365. • Client will make available appropriate personnel, network account access, and IT environments in a timely fashion. • Items not listed as "Scope of Services" will be considered out of scope but could be added if time/resources are available. • Any actionable remediation items identified during the engagement can be defined and delivered in a Statement of Work, or a Trusted Advisor agreement.

Executive Summary:

• Access to Microsoft Cloud Security Experts. • Gain a mutual understanding of cloud security objectives and requirements. • Provide guidance, recommendations, and best practices on how to successfully implement Microsoft 365 security features. • Provide a prioritized and actionable Microsoft 365 security roadmap.

Deliverables:

• Pre-assessment Questionnaire & Kickoff Call • Best Practices Review and Recommendations • Secure Score Review • Findings Report and Remediation Plan • Interactive Remediation Review with Team – 2 Hours