When to use this review
Use it when admin roles, MFA exceptions, external sharing, endpoint policy or alert ownership have accumulated without a current control map or evidence pack.

Start with a read-only review of identity, devices, email and sharing, then separate urgent exposure from clean-up work. £1,500 to £2,500; usually 5 working days. Remediation is scoped separately.
Use it when admin roles, MFA exceptions, external sharing, endpoint policy or alert ownership have accumulated without a current control map or evidence pack.
Review users, groups, roles, MFA, Conditional Access, Intune, Defender, Exchange, SharePoint, break-glass access and audit visibility. Output: risk summary, evidence snapshot and ordered remediation backlog.
Entra ID & Conditional AccessCyber Essentials Plus readiness service
No. Focused review, remediation and handover — not helpdesk or a retainer.
The independent Microsoft 365 Security Review is £1,500 to £2,500 and usually takes five working days. Access is scoped and time-bound; remediation is agreed separately.