Skip to content

Microsoft 365 security. A clear plan.

I find the gaps in your Microsoft 365, rank them by risk and hand your IT owner an ordered plan.

What changed when I ran IT in-house
Intune device compliance
  • Before72%
  • After96%
Phishing and data-exposure incidents a day
  • Before25–30
  • After12
From my in-house IT roles before Magrathean, where I also took the organisation through Cyber Essentials Plus first time. More about my background.

Where I can help

Where UK businesses stand

Most UK businesses have the basics in place. Fewer than half use two-factor authentication.

43%of UK businesses reported a cyber breach or attack in the last 12 months
By business size
  • 42%Micro
  • 46%Small
  • 65%Medium
  • 69%Large
Controls businesses have in place
  • Updated malware protection81%
  • Cloud backups74%
  • Password policies74%
  • Network firewalls74%
  • Restricted admin rights73%
  • Two-factor authentication47%
Source: Cyber Security Breaches Survey 2025/2026 (opens in a new tab), DSIT and Home Office, April 2026. UK businesses.

How attacks get in

Phishing is by far the most common attack on UK businesses. With two-factor authentication on, a stolen password is no longer enough to get in.

38%of UK businesses were targeted by phishing in the last 12 months
69%of breached organisations named phishing their most disruptive attack
Types of attack businesses reported
  • Phishing38%
  • Impersonation in emails or online12%
  • Malware on devices7%
  • Online bank account hacking3%
  • Denial of service3%
  • Account takeovers2%
  • Ransomware1%
Source: Cyber Security Breaches Survey 2025/2026 (opens in a new tab), DSIT and Home Office, April 2026. UK businesses.

Not sure where to start?

Check your Microsoft 365 controls with the free self-assessment.

Run the Microsoft 365 security self-assessment

How the review runs

Usually five working days once access and context are ready.

  1. 01

    Access

    Tenant access and your context.

  2. 02

    Review

    Identity, devices, email and sharing.

  3. 03

    Rank

    Gaps ordered by exposure.

  4. 04

    Hand over

    Evidence, named owners and an ordered plan.

Questions teams ask first

Do I need to replace my IT team or MSP?

No. I work alongside your IT team or MSP on Microsoft 365 security, then hand back documentation.

What does a Microsoft 365 security review cost?

The independent Microsoft 365 Security Review is £1,500 to £2,500 and usually takes five working days after access and context are ready. Remediation is scoped separately.

Do you require a long-term contract?

No. Scoped and paid per engagement.

Who does the work?

I do — Gyorgy Bolyki. You work with me directly, not a junior or account manager.

Go a little deeper

Start a conversation