# Microsoft 365 & Entra ID Security Assessment

> From $4.5K · Cloud & Application Security · https://cisomarketplace.services/services/microsoft-365-entra-security-assessment

A fixed-scope assessment of the Microsoft 365 tenant most organizations run their business on: identity and conditional access in Entra ID, Exchange Online and anti-phishing, SharePoint/OneDrive/Teams sharing, Defender and Purview configuration, admin roles and break-glass accounts. Measured against the CIS Microsoft 365 Foundations Benchmark and Microsoft Secure Score, delivered as a prioritized hardening plan your IT team or MSP can execute.

## In scope

- Entra ID: MFA, conditional access, legacy auth, privileged roles
- Exchange Online: anti-phishing, SPF/DKIM/DMARC, mail flow rules, forwarding
- SharePoint, OneDrive and Teams external sharing and guest access
- Defender for Office 365 / Endpoint and Purview baseline
- Audit logging, alerting and break-glass account review

## Deliverables

- CIS Microsoft 365 benchmark scorecard
- Prioritized hardening plan (quick wins / 30 / 90 days)
- Conditional access policy recommendations
- Executive summary for leadership or your cyber insurer

## Tiers

### Essential M365 Review: $4.5K

Single tenant up to 100 users: CIS benchmark review, Secure Score analysis and a prioritized hardening plan

Limits: users 100, locations 3

### Advanced M365 & Entra Assessment: $9.5K

Up to 500 users: adds conditional access design, privileged access review, Defender and Purview configuration and a remediation workshop

Limits: users 500, locations 10

### Enterprise M365 Security Program: $18K

Multi-tenant or 500+ users: adds hybrid identity (AD Connect), application consent and service principal review, and 30 days of remediation support

Limits: users 5000

Excludes:
- Tenants above 5,000 users are scoped individually

## Terms

Starting price shown is the lowest published tier. A written proposal fixes scope, tier and price before anything is signed. Timeline is set in the SOW.

Scope this engagement: https://cisomarketplace.services/scope?service=microsoft-365-entra-security-assessment