Your insurer asked about MFA. Can you answer yes?
We check how your Microsoft 365 is set up, fix what’s wrong, and give you the evidence your insurer, auditor or biggest client is asking for. One fixed price, agreed before we start.
Section 4: Access controls
- Is multi-factor authentication enforced for every user, including email?
- Are admin accounts kept separate from day-to-day accounts?
- Is access to company data blocked from unmanaged devices?
- Are older sign-in methods that skip MFA turned off?
If you’d tick “not sure” to any of these, that’s exactly what we sort out.
What we look at
The settings that insurers, Cyber Essentials and supplier questionnaires ask about, in your own Microsoft 365.
- Sign-in
- Whether MFA covers everyone, and whether older sign-in methods let attackers walk round it.
- Admin accounts
- Who holds the keys to your tenant, and whether those accounts are protected properly.
- Spoofing protection for your domain, suspicious forwarding rules, and phishing defences.
- Devices
- Which laptops and phones can open company files, and what happens if one goes missing.
- Sharing
- What is shared outside the business from OneDrive, SharePoint and Teams.
- Licences
- Whether the security features you already pay for are actually switched on.
How it works
A 20-minute call
We find out what is driving it: an insurance renewal, Cyber Essentials, or a client’s supplier questionnaire.
A read-only review
You grant temporary read-only access. Several hundred automated checks run against Microsoft and CISA security baselines, then a person reviews every result. Nothing changes yet.
We fix it
Agreed changes are made at a time that suits you and tested first, so nobody gets locked out on a Monday morning.
You get the evidence
A plain-English report showing what was wrong, what changed and how things are set now. Ready to attach to an insurance form or a Cyber Essentials submission.
What it costs
From £1,500Fixed after the first call. No day rates, no surprises.
- Full read-only review of your Microsoft 365 security settings
- The fixes, made and tested with minimal disruption to staff
- A plain-English evidence pack you can send to your insurer or auditor
- A follow-up call to go through the results
Who you’ll work with
Gabi, a Microsoft 365 and security consultant with more than 20 years in the field, including work for Deloitte, Akamai and Nokia. SC security cleared, based in Guildford and working with businesses across Surrey and the rest of the UK.
You deal with the person doing the work, start to finish.
Common questions
We already have an IT provider. Is this for us?
Yes. We work alongside them. If you prefer, we hand the fixes to them with clear instructions.
Is this Cyber Essentials certification?
No. We are not a certification body. We get your Microsoft 365 set up to meet the requirements and give you the evidence, so the certification itself goes smoothly.
Will my staff notice?
The review is read-only. When we turn on things like MFA, we tell people in advance and walk anyone through it who needs help.
What does “from £1,500” cover?
The review, the fixes and the evidence pack for a typical small business. You get a fixed price after the first call, before anything starts.
Got a renewal form or questionnaire sitting in your inbox?
Book 20 minutes. Bring the form if you have one, and we’ll tell you where you stand and what it would cost to fix.