How it works.

The things insurers ask about that your Microsoft 365 can show:

• Whether a sign-in rule, or Microsoft’s security defaults, asks everyone for more than a password.
• Whether your admin accounts have a second sign-in step set up.
• Whether Microsoft’s antivirus for business is part of your setup. Not which computers have it.
• Which outside apps people have connected, and which guest accounts nobody uses.
• Whether you’ve set up labels for sensitive files.

Where the scan can’t tell, the report says so. The rest, like backups and your plan for an incident, you answer on a form. The scan also checks how your email is protected from being faked.

See everything it checks →

On your own. Ask for access and I’ll set up your workspace. Your Microsoft admin approves the connection, you answer the form, and you read your report when it’s ready.

With me. Book a call. We’ll get you set up together, and I’ll go through the report with you. You pick a time on my calendar.

Someone with admin rights to your Microsoft 365 approves the connection on Microsoft’s own screen, which lists every permission first. The app can see how things are set up, your user accounts and sign-in activity. It doesn’t read your email or files, and it can’t send email or change your settings.

You can take it back from Settings, or from your own Microsoft admin page, whenever you like. You don’t have to tell me first.

Exactly which permissions, and why →

Your report starts with a plain answer: ready to apply, answers needed, or fix before applying. Then:

• What to fix first, with what insurers care about most at the top.
• Everything insurers ask about, and whether the scan saw it, worked it out from other settings, found a gap, couldn’t tell, or needs your answer.
• Travelers’ and At-Bay’s applications, question by question, with the answer the scan suggests where it can, and the one you gave.

For each one you can see what the scan read, and when. If something looks wrong, tell me and I’ll look into it.

A slide version comes with it, for a board meeting. The report is yours to keep and to share with your insurer, your board or your IT person.

• Access you can take back any time.
• One assessment, with nothing to renew or cancel.

There’s nothing to install. The report is yours either way.