Example Firm Ltd
What we checked
- High riskTwo-step sign-in
7 of 12 accounts have no two-step sign-in, including the finance manager’s account.
- High riskBackup
Email and files exist only in Microsoft 365. There is no separate backup if something is deleted or encrypted by ransomware.
- High riskAdmin rights
4 accounts have full admin rights. One of them belongs to an employee who left last spring.
- MediumFile sharing
38 files in OneDrive and SharePoint are shared with “Anyone with the link”, including two folders with client data.
- OKProtection against scam emails
Microsoft’s basic protection is active. No issues found.
Your three biggest risks – and what to do
- Remove the admin account of the employee who has left. Can be done the same day at no cost.
- Turn on two-step sign-in for every account. Already included in your Microsoft 365 licence and takes a few minutes per employee.
- Add a separate backup of email and files. Included in all our tiers, starting with Cloud Basic.
All details in this example are made up.
