Microsoft 365 security review and clean-up for tenant drift
Start with a read-only review of identity, devices, email and sharing, then separate urgent exposure from clean-up work. £1,500 to £2,500; usually 5 working days. Remediation is scoped separately.
What this fixes
Start with the control problem or outcome you need to make clear.
When to use this review
Use it when admin roles, MFA exceptions, external sharing, endpoint policy or alert ownership have accumulated without a current control map or evidence pack.
Scope, output and handover
Review users, groups, roles, MFA, Conditional Access, Intune, Defender, Exchange, SharePoint, break-glass access and audit visibility. Output: risk summary, evidence snapshot and ordered remediation backlog.
Not sure where to start?
Use the next useful check before you book the work.
- Risk-ranked findings across identity, devices, email and sharing.
- Evidence snapshot for each material finding.
- Named owners and an ordered remediation backlog.
- Access and change assumptions recorded before remediation.
- Readout and handover notes for internal IT or the existing MSP.
Questions teams ask before the work
Is this a managed IT service?
No. Focused review, remediation and handover — not helpdesk or a retainer.
What does the initial review cost and take?
The independent Microsoft 365 Security Review is £1,500 to £2,500 and usually takes five working days. Access is scoped and time-bound; remediation is agreed separately.
Related work
Scope the next step.
Send user count, licensing, the drifted areas and any audit, renewal or board deadline.