Microsoft 365 Security Sanity Check
(10-20 minutes)

A non-technical checklist to quickly spot common M365 risks.

What this is

A quick checklist to identify “default mode” M365 risks. It doesn’t replace a full review, but it reliably finds the common problems.

1) Fast checks (do first)

Check	What good looks like	Status
MFA enforced for all users	Everyone uses MFA; admins have stronger MFA	☐
Admin accounts separated	No daily-use admin accounts; least privilege	☐
Mailbox forwarding rules	No unexpected forwards to external addresses	☐
Risky sign-in alerts	Alerts enabled and monitored	☐
External sharing controls	SharePoint/OneDrive sharing is intentional, not open	☐

2) “High value” settings to confirm

Conditional access baseline: require MFA, block legacy auth, restrict risky sign-ins.
Admin hardening: 2+ admins, break-glass account, alerts for admin changes.
Audit visibility: ability to review sign-ins, mailbox rules, and sharing activity.

3) Quick questions to ask your IT person/MSP

Question	Why it matters
Are we blocking legacy authentication?	Stops a common path for password-spraying and basic takeover.
Do we alert on new inbox rules and external forwards?	Attackers often hide in forwarding rules.
Do admins use separate accounts and stronger MFA?	Admin takeover is catastrophic.
Do we have an M365 backup strategy?	Recycle bin isn’t the same as recoverability.

4) What to do if you find a problem

Fix MFA enforcement gaps immediately.
Remove suspicious forwarding rules and reset passwords for affected users.
Review sign-in logs for unusual locations/devices.
Harden admin access and document the changes.

5) “Minimum baseline” outcome

MFA enforced for all users
Legacy auth blocked
Admins hardened (separate accounts, stronger MFA)
External sharing reviewed and intentional
Alerts in place for risky sign-ins and inbox rules

Note: This document is general operational guidance and does not replace legal advice. It helps you establish a practical baseline and reduce common privacy risks.

👉 Free 30-minute consultation

No hard sell - just clarity and practical next steps.

hello@virtusgroup.biz
virtusgroup.co.nz
0800 847 887 (VIRTUS)

Book now