How exposed is your Microsoft 365 tenant?

Answer seven quick questions to see your exposure score and the top priorities to harden your posture. No tenant access required.

1.How much of your workforce is covered by multi-factor authentication?

All users, including admins and service accountsMost users, but some exclusions remainOnly admins or a subset of usersMFA is optional or not enforced

2.How mature are your Conditional Access policies?

Risk-based policies with device and location controlsBaseline policies in place but rarely reviewedA few legacy rules onlyNo Conditional Access policies

3.How is external and guest sharing in SharePoint, OneDrive and Teams governed?

Restricted, reviewed, and time-limitedAllowed with some guardrailsBroadly allowed with little oversightAnonymous links allowed, no review

4.How often do you review M365 license assignments and inactive accounts?

Continuously / automated reviewsQuarterlyOnce a year or ad-hocNever

5.How governed is your Microsoft Copilot / AI rollout?

Governed rollout with data-access controls and monitoringPiloting with some guardrailsEnabled broadly without a governance reviewUnmanaged or shadow AI in use

6.How ready are you to produce audit evidence for a framework like NIS2 or ISO 27001?

Evidence is continuous and export-readyWe can assemble it with some effortIt takes weeks of manual workWe could not produce it today

7.How do you handle joiner / mover / leaver offboarding?

Automated and verified deprovisioningA documented manual processInconsistent / best-effortNo reliable offboarding process

Get your results reviewed by a governance engineer

Share where to send your tailored remediation plan and we'll follow up within one business day.

Name *

Work email *

Company

TenantIQ is powered by

Impressum Privacy Policy Security