Comments on: Analyze Your Office 365 Tenant Security with Secure Score

By: Multi-factor Authentication by Default for Administrators in Azure AD and Office 365 – SimpleITPro

Mon, 24 Sep 2018 19:02:55 +0000

[…] accounts being one of the recommend first steps for new Office 365 tenants, being flagged by Office 365 Secure Score, and being one of the general account security recommendations from […]

By: wayne

wayne — Tue, 12 Jun 2018 11:43:07 +0000

hi on the Excel spreadsheet what does complete and incomplete imply.

By: Securing Office 365 Admin Accounts with Multi-Factor Authentication

Securing Office 365 Admin Accounts with Multi-Factor Authentication — Tue, 24 Oct 2017 08:18:37 +0000

[…] exposed. Aside from the security benefits, enabling MFA is also one of the recommendations in the Office 365 Secure Score report, and you'll get a nice 50 point bump to show your […]

By: Tony

Tony — Thu, 05 Oct 2017 13:19:11 +0000

Paul, great job as usual. I find the security score update can take several days at times. Many of the auditing tasks require Azure AD Premium subscription. Most of these tasks are similar to what would normally be done on premise. This gives a good overall view of where your tenant stands. The Key thing is auditing the user logons and locations – impossible logons, locations in Nigeria mean your user has been compromised.

By: Paul Cunningham

Paul Cunningham — Thu, 23 Feb 2017 10:51:51 +0000

In reply to Kishore. Some actions don't move the score (yet) and I think there might also be some delay on some of the changes to the score while your tenant is re-analyzed. Everything that Secure Score recommends is documented in Secure Score or linked to from that item in Secure Score. If there's anything that doesn't have enough instructions yet, I'm sure that will improve over time.

By: Kishore

Kishore — Thu, 23 Feb 2017 09:41:09 +0000

Thanks for sharing the details. I have completed most of the actions which were suggested by the MS for our Organization, however our score is not getting increased. Few of the action items in the list is to enable aduting for all users in the Organization and review the reports(eg:malware detection reports, non global admin activity, non owner access…etc). Can you please suggest is there any specific reports I need to download or go through? Do you have any document on how to perform all the actions in the list.