Free Microsoft 365 Security Score

Ten quick questions, about two minutes. You’ll get a score out of 100 and the fixes that matter most for your office. Nothing is sent anywhere unless you choose to request your results by email.

1. Is multi-factor authentication (MFA) required for every user, including admins? Yes, everyone Only some users No / not sure

2. Is legacy authentication (old POP/IMAP/SMTP sign-ins) blocked? Yes, blocked Partially No / not sure

3. How many people have Global Administrator rights? 2 to 4 dedicated admin accounts 5 or more, or admins use their everyday account Not sure

4. Are external email auto-forwarding rules blocked or monitored? Blocked or alerted Sometimes reviewed No / not sure

5. Are SPF, DKIM and DMARC set up for your email domain? All three, DMARC enforced Some of them No / not sure

6. Do staff get a warning banner on email from outside the company? Yes Some users No / not sure

7. Are company laptops encrypted and managed (e.g., Intune/BitLocker)? All devices Some devices No / not sure

8. Is sign-in and audit logging turned on and reviewed? Yes, reviewed regularly On but not reviewed No / not sure

9. Can staff share files with anyone via anonymous links? No, restricted Allowed with expiration Yes / not sure

10. Is Microsoft 365 data (mail, OneDrive, SharePoint) backed up separately? Yes, third-party backup Only Microsoft's built-in retention No / not sure

/100

Book a free 20-minute checkup call

Or email Greg your score.

Back to Squared Away Tech · Privacy