For businesses on Microsoft 365
Microsoft 365 security checklist: eight settings worth checking
Email, files and account access make Microsoft 365 central to the working day. Use this Microsoft 365 security checklist, sometimes called an Office 365 security checklist, to review eight important areas and identify questions for further investigation. Our team can review your answers and suggest priorities.
The checklist
Your Microsoft 365 checklist
Complete the eight questions and our team will review your answers. We will suggest areas to investigate and priorities to discuss.
Report cross-promotion
Go deeper with the 2026 Cyber Resilience Report
- Why It’s Now Commercial - how cyber resilience now affects contracts, insurance and customer confidence.
- The Microsoft-365 Gap - the common Microsoft 365 settings businesses miss, and the checks to make first.
- Frameworks Compared - when Cyber Essentials, Cyber Essentials Plus, ISO 27001, SOC 2 and NIST CSF matter.
- Monitoring & Evidence - what to record, review and keep ready before a customer or insurer asks.
- Zero Trust, Simply - how to reduce unnecessary access without slowing people down.
- The 90-Day Roadmap - a practical order of work: visibility, hardening, evidence and certification.
- The Self-Assessment - a 25-question cyber security check to run with your leadership team.
Making great IT personal and accessible
Meet Matt, Managing Director of INDIGO IT
Matt is passionate about technology and helping businesses to thrive with it. If your tech is in a tangle, he'd love to help you. Whether it's tricky tech, cyber security, or transforming your business's IT to achieve your goals, Matt can offer clear guidance, free from the technobabble.
Ready to make headway to exceptional IT? It all starts with an informal conversation!
Frequently asked questions
Microsoft 365 security questions we get asked
If yours isn't here, call us on 01491 693424.
Yes. A provider can help assess access controls, administrative permissions, email protection, logging, device management and backup arrangements, then explain the work needed in your environment.
Microsoft 365 connects business information with the accounts and devices used to access it. Appropriate configuration and ongoing management help reduce the impact of compromised credentials and other security weaknesses.
Microsoft 365 includes retention and recovery features, and separate backup services are available. What you can restore depends on your configuration and subscriptions. We check that coverage and help put any additional backup your business needs in place.
Yes. We work through the findings and put the necessary configuration and security changes in place. Microsoft 365 management forms part of our managed IT service, and we also support Cyber Essentials preparation.