Microsoft 365 hardening and business account security
Your company's email, files and accounts live in Microsoft 365. We make sure they are truly protected, at the level of large organizations.
Elad personally oversees every project and makes sure it runs at the highest standard, from the first review to handover.
Why Microsoft 365 default settings are not enough
Microsoft 365 is built so a business can start working on day one. That is its great strength, and also what makes it vulnerable: the out-of-the-box settings are open enough that nobody gets stuck, and not closed enough to stop an attacker. The result is familiar in almost every business: employees signing in with a password only, too many admins, and files shared outside two years ago and forgotten.
Hardening closes these gaps in an orderly way. We review the environment as it is today, set up multi-factor authentication and access rules, strengthen email protection, and clean up permissions and sharing. Everything is done in stages and scheduled in advance, and employees get a short explanation of what changes for them. At the end you have a protected environment, and a document that explains exactly what was set and why.
When should you harden Microsoft 365?
If one of these sounds familiar, now is the time to review your environment, before it becomes a problem.
An email account was compromised
Someone sent phishing messages from an employee's account, or forwarding rules appeared that nobody set up. We close the gap and reduce the chance of it happening again.
MFA for only some employees
Some accounts are protected, some still sign in with a password only, and there are exceptions nobody remembers the reason for. An attacker needs only one weak account.
No picture of what is shared outside
Over the years, files and folders were shared with customers, suppliers and former employees. Today nobody knows exactly what is still open.
Everything your Microsoft 365 needs to be protected
We start with a review, and implement in an order of priority we decide on together.
Current state review
Mapping the settings, users and permissions in your environment, so you know exactly what is protected and what is still open.
Deliverable: status report and rollout planMFA and Conditional Access
Multi-factor authentication for every user, and smart access rules by user, device and location.
Deliverable: documented access policyEmail protection
Protection against phishing and impersonation, blocking automatic forwarding outside, and SPF, DKIM and DMARC so nobody can send email in your name.
Deliverable: protected email and verified domainAdmin rights
Fewer admins, separate everyday and admin accounts, and a secure emergency account for the day something goes wrong.
Deliverable: admin rights mapExternal file sharing
A SharePoint and OneDrive sharing policy that fits the way you work, and a review of everything shared so far.
Deliverable: defined sharing policyLogs and alerts
An active audit log and alerts on sensitive actions, so if something happens, you can quickly understand what happened.
Deliverable: active alerts and audit logHow it works
Four stages, and you know in advance what happens in each one.
1. Introduction
We learn how the business works, who works outside the office, and which systems are connected to Microsoft 365.
2. Review and planning
We review the environment, present the findings in plain language, and decide together what to do and in what order.
3. Staged rollout
We implement in an agreed time window, with a test for every change and a way back if needed.
4. Handover and documentation
You receive the settings document and procedures, and whoever manages the system on your side gets a training session.
What stays with you at the end
Everything belongs to you, written so your IT provider can carry on from the same point.
- A before and after report, showing what changed and what is worth handling next.
- A documented settings record: access policy, email protection, permissions and sharing.
- An employee joiner and leaver procedure, so accounts and permissions are opened and closed on time.
- A short training session for your system admin, and a simple explanation for employees of what changes for them.
High security standards, with personal oversight
Elad Elimelech, founder of Marom Cyber, brings 20 years of technology experience, most of them in management roles. In recent years he led technology strategy in information security and management at companies serving hundreds of organizations in high tech, finance and healthcare. He defined information security standards at the highest level and was the go-to authority for the most complex technology challenges across those organizations. When standard solutions were not enough, he led the solution.
Personal oversight until the project succeeds
Elad oversees every stage of the project and is responsible for the result. You know at every stage what is being done, and you have one senior point of contact for every question.
Protecting the business's information
Email, files and accounts are where the business's sensitive information lives. The hardening is built around what needs protecting, and from what.
No unnecessary spending
First we make full use of what you already pay for. A recommendation for further investment comes only when it is really worth it for you.
A view of information security as a whole
Microsoft 365 is part of a complete system. The settings work together with the network, endpoint protection, backups and compliance requirements, so everything works as one.
Frequently asked questions about Microsoft 365 hardening
If anything is unclear, you can always ask us directly.
Completing the picture
Services and articles that connect to Microsoft 365 hardening.
Risk assessment and gap analysis
Want the full picture, beyond Microsoft 365? This is what a risk assessment looks like.
Learn more →Microsoft 365 security risks
The common gaps in business Microsoft 365 environments, and why the defaults are not enough.
Read the article →MFA: why a password is not enough
Multi-factor authentication, and why it is one of the most worthwhile steps a business can take.
Read the article →Want to know how well your Microsoft 365 is really protected?
A short call with Elad, and you will know where you stand and what to check first. Free and with no obligation.
Book a call →