An old contractor still has administrator access, or the only recovery method belongs to someone who left. Adding another security product will not resolve that ownership problem. We begin with the accounts that can change the environment.
We work from Perth with remote support across Australia. Your current licences, business requirements and expected evidence determine the scope and fees.
Establish the reason for the review
A general account cleanup, a customer requirement and an unusual sign in need different work. Explain the trigger and any deadline at the beginning. An active compromise may require specialist incident handling.
We identify the accounts, services and evidence in scope before applying a standard list of settings.
Find who can change the tenant
Review administrator roles, account ownership and recovery details. Check whether access still matches the person’s responsibilities. Staff changes and contractor handovers often leave gaps.
The business needs a recovery arrangement that works if its usual administrator is unavailable. Appropriate access records should be kept through an agreed private method.
Check authentication without locking people out
Authentication work needs to include affected staff and the apps they use. Older applications or a missing recovery method can interrupt a rollout. We agree on checks and a way to recover access.
Policies such as Conditional Access depend on licences and environment design. Their availability should be verified before a change is quoted.
Review sensitive file and mailbox access
A shared document or mailbox may be available more broadly than intended. We review permissions against the people who need the information. Departing staff and external users should be considered.
Data loss prevention addresses particular sharing rules and has its own detailed service. It should follow an understanding of the information and workflows involved.
Connect the configuration to ongoing security
A one off configuration review does not provide continuous monitoring or incident response. If you want regular reviews, alert handling or patch responsibilities, those need an explicit support agreement.
The wider security service can help establish ownership across devices and business systems as well as Microsoft 365.
Record changes and the remaining work
The handover should explain access reviewed, controls changed and the checks performed. Unresolved items need an owner and a next step. Administrator recovery should remain usable after the work.
The output is configuration and support evidence within the agreed scope. It should not be presented as an independent certification or an assurance covering every system.
