Executive Summary

Action Required

Microsoft Secure Score

CIS Microsoft 365 Benchmark

CIS Intune Compliance

CISA Security Baselines

Methodology

Read-Only Assessment

Remediation Roadmap

Compliance

PCI-DSS 4.0.1 Endpoint Compliance

Microsoft Recommendations

CIS Microsoft 365 Benchmark

CIS Intune Compliance

CIS Benchmarks for Microsoft Intune — evaluates deployed Intune policies against CIS security baseline requirements.

1 Policy Configuration
2 Assignment Coverage
3 Device Compliance
Show failed controls
Show missing controls
Show manual review controls

CIS Azure Benchmarks

Show failed controls

CISA Security Baselines

CISA SCuBA baseline assessment — evaluates Microsoft 365 configuration against CISA's official security recommendations.

Show failed controls
Show warning controls
Show manual review controls
Show error controls

Identity & Access

MFA Registration

Show users with no MFA
Show users with weak MFA
Show users with Authenticator / TOTP
Show users with phishing-resistant MFA
Show department breakdown

Conditional Access

Show report-only policies
Show policies with exclusions
Show disabled policies

CA Coverage

Privileged Access

Show Global Administrators
Show all role assignments
Show service principal assignments

Device Management

Show unmanaged devices
Show stale devices
Show excluded noise records

Cost Optimization

License Optimization

Show disabled accounts with licenses
Show inactive users with licenses
Show savings by license type
Show trials & subscription health
Show downgrade recommendations
Show tenant feature inventory
Show plan coverage map

License Usage Analysis

Show tenant feature inventory
Manual verification items (admin portal checks)
Show usage-verified downgrade opportunities

Collaboration & Data

Exchange Online

Show accepted domains
Show largest mailboxes
Show forwarding rules

SharePoint Online

Show largest sites
Show inactive sites
Show sites with external sharing

OneDrive for Business

Show largest OneDrive accounts
Show inactive OneDrive accounts
Show users approaching quota

Teams Governance

Show largest teams
Show orphaned teams
Show teams with guest members

Threat Posture

Defender Alerts

Show active alerts