Identity & Access
- Multifactor authentication
- Conditional Access
- Privileged accounts and roles
- Guest access
- Legacy authentication
- Applications and service principals
CISSP-led, read-only security review
Microsoft 365 Security Assessment
Microsoft 365 is often the centre of a business's identity, email, files, and collaboration. A few configuration gaps can create significant exposure. We help Canadian SMBs see which settings matter and what to address first.
Up to 25 users, starting at $1,995 CAD
What we review
Visibility across the settings your business relies on.
The scope is agreed with you first. Reviews focus on licensed capabilities and relevant business use.
Sharing & Collaboration
- SharePoint and OneDrive external sharing
- Anonymous links
- Teams anonymous and external access
Email Security
- Exchange security, malware, and anti-phishing protection
- Microsoft Defender for Office 365
- Zero-Hour Auto Purge
- Safe Links and Safe Attachments
- Forwarding controls
Device & Mobile Security
- Intune compliance where licensed
- Mobile application management
- Conditional Access integration
Domain Security
- SPF
- DKIM
- DMARC
Your data stays yours
Configuration-based and read-only.
NorthSecure's Microsoft 365 assessment is configuration-based and read-only. We do not read customer email, documents, Teams chats, passwords, authentication secrets, or recovery keys.
Access is customer-authorized, scoped to the assessment, and handled confidentially. We do not modify your configuration.
What you receive
- Analyst-reviewed findings and positive observations
- Executive summary in business language
- Technical detail for your IT team
- Prioritized remediation plan
- Optional review call and retest options
Starting prices
Tiered by licensed user count.
Final scope also depends on licensed capabilities, tenant complexity, and agreed review areas.
Up to 25 users$1,995 CAD
26–100 users$3,250 CAD
101–250 users$4,950 CAD
Larger organizationsContact us
How it works
A controlled review, then a practical plan.
01 Define ScopeConfirm authorized tenant access and review areas.
02 AssessReview configuration with customer-authorized read-only access.
03 Analyst ReviewContextualize and prioritize findings.
04 Action PlanReceive a report explaining what matters and what to fix next.
Practical answers
Frequently asked questions
Who is this assessment for?
Canadian organizations that want an independent, read-only review of relevant Microsoft 365 security configuration.
Will you read our email or documents?
No. The review is configuration-based. We do not read customer email, documents, Teams chats, passwords, secrets, or recovery keys.
How is scope and price set?
Starting tiers depend on licensed user count. Tenant complexity, licensed capabilities, and agreed review areas determine final scope.
What will leadership receive?
An executive summary, analyst-reviewed findings, technical detail for IT, and a prioritized remediation plan.
Microsoft 365 security
Know which settings need attention.
Need ongoing governance and security oversight after the review? Explore Security & AI Lead. This assessment is readiness guidance, not a formal audit or certification.