M365 & Security
Security
Security, governance, compliance, risk management, and security operations run as one control model rather than seven separate consoles.
One control model across five concerns: security across identity, endpoints, email, and data; governance of privileged access and tenant policy; compliance with the standards and regulations your organisation answers to; risk management that closes the most expensive gaps first; and security operations that monitor, detect, and respond. Microsoft Defender, Microsoft Entra ID, Microsoft Intune, Microsoft Purview, and Microsoft Sentinel are configured as one operating chain, with audit evidence produced from the tenant's own data rather than screenshots collected by hand.
Microsoft DefenderSecurity and controlThe Microsoft products behind it
What each product protects or produces, how it works, and the problem it answers.
- Microsoft Defender for Endpoint
Stops endpoint attacks before they spread
An enterprise endpoint security platform that helps organizations prevent, detect, investigate, and respond to advanced threats across supported devices.
- Endpoint Security
- EDR
- XDR
- +3 more
- Microsoft Defender for Cloud Apps
Secures your SaaS environment
A cloud security solution that provides visibility into cloud application usage, protects sensitive data, governs applications, and detects anomalous behavior.
- SaaS Security
- CASB
- Shadow IT
- +3 more
- Microsoft Defender for Identity
Detects identity attacks across hybrid environments
An identity threat detection and response solution that monitors identity signals to uncover compromised credentials, lateral movement, privilege escalation, and insider threats.
- Identity Security
- ITDR
- Active Directory
- +3 more
- Microsoft Defender for Office 365
Protects email and collaboration
An email and collaboration security solution that helps stop phishing, business email compromise, malicious links, unsafe attachments, and post-delivery threats.
- Email Security
- Anti-Phishing
- Business Email Compromise
- +3 more
Microsoft IntuneGoverns and manages every endpoint
A cloud-based endpoint management solution that helps organizations manage devices, applications, security policies, and access to company resources.
- Endpoint Management
- Mobile Device Management
- Mobile Application Management
- +3 more
Microsoft Entra IDSecures every identity and access request
A cloud identity and access management solution that authenticates users, controls access to resources, and supports identity-centered Zero Trust security.
- Identity and Access Management
- Single Sign-On
- Multifactor Authentication
- +3 more
Microsoft PurviewProtects and governs data wherever it lives
A family of data security, governance, risk, and compliance solutions that helps organizations understand, protect, and manage sensitive information.
- Data Security
- Data Governance
- Data Loss Prevention
- +3 more
Microsoft Defender for CloudProtects multicloud applications and workloads
A cloud-native application protection platform that helps improve security posture and protect workloads across Azure, Amazon Web Services, Google Cloud, and hybrid environments.
- CNAPP
- Cloud Security Posture Management
- Cloud Workload Protection
- +3 more
Microsoft SentinelUnifies intelligent security operations
A cloud-native security information and event management solution that collects security data, detects threats, supports investigations, and automates response across the enterprise.
- SOC
- SIEM
- SOAR
- +4 more
How the work is scoped
Engagements delivered by this capability, each with defined modules, deliverables and a timeline.
- M365 & Security
Security Posture Review
A review that consolidates security posture and monitoring into evidence the organisation can produce on demand.
- Work modules
- 3
- How scope is agreed
- Scope depends on the size of the estate under review, agreed with the practice team before work begins
- M365 & Security
Identity Hardening Sprint
A focused engagement that moves identity from a directory of people into the control point for access.
- Work modules
- 3
- How scope is agreed
- Scope depends on the number of administrative roles and applications in the tenant, agreed with the practice team before work begins