Home › Services › Sample report
Sample Microsoft 365 Security Checkup report
This is a sample for a fictional office. “Example Dental Group” and every finding below are made up to show the format. A real report is about 4 pages and goes only to you.
1. Summary
Overall rating: At Risk. In plain English: 3 of 14 people, including 1 admin, can sign in with just a password. One mailbox forwards all mail to an outside Gmail address. The good news: backups and laptop encryption are already in good shape.
| High | Medium | Low | Already good |
|---|---|---|---|
| 3 | 4 | 2 | 11 |
2. Fix first (numbered fixes)
- Turn on MFA for the 3 users who do not have it, starting with the admin account.
- Remove the rule that forwards the front-desk mailbox to an outside Gmail address.
- Reduce Global Admins from 5 to 2 and create 1 emergency (break-glass) account.
- Block legacy sign-in methods that skip MFA.
- Publish a DMARC record so others cannot send email pretending to be your domain.
- Remove 2 unused third-party apps that can read every mailbox.
- Stop anonymous “anyone with the link” sharing in OneDrive.
Each fix is 1 sentence. The guarantee: if a Checkup finds fewer than 3 fixes like these, you don’t pay.
3. What is already good
- All 12 laptops are encrypted with BitLocker.
- Audit logging is turned on.
- Mailboxes are backed up outside Microsoft.
4. Next steps
You choose. Fix them yourself with the steps in the report, have your IT provider do it, or book the Tenant Lockdown (Checkup fee credited within 30 days).
Not sure where to start? Book a free 20-minute checkup call. No cost, no obligation. Call or text (941) 479-1075 or email greg@squaredawaytechfl.com.
Book a free 20-minute checkup callThis is not a help desk: printers, desk phones and slow computers stay with whoever handles them today. Reports do not guarantee insurer approval or certify any compliance program. Follow-on work covers only the numbered fixes in your signed scope; anything beyond that list is quoted separately. All services · Sample report · How remote service works · FAQ