The challenge
- No single view. Hundreds of security settings in Microsoft 365, and no simple way to know what is set right and what isn’t.
- No clear priority. Without an order of work, it’s hard to know where to start.
- Settings that slip back. A setting that was fixed can change again without anyone noticing.
What we did together
1A clear picture from the first scan
Griffin31 checked the tenant against more than 350 recommendations and showed what was open in each area.
The benefit: One clear view of the security posture, instead of checking every setting by hand.
2Critical gaps first
The team started with the critical gaps, the ones that open the door to account takeover, phishing and email impersonation, and closed them within weeks.
The benefit: The most common ways to attack the tenant were closed first, and the rest went into an ordered work plan.
3Hardening across identity, email and devices
Fixes in Entra ID, Exchange and Intune, following Griffin31’s recommendations.
The benefit: Each area moves forward on its own, and the team sees exactly how far each one has come.
4Monitoring: every setting that slips back is flagged
Griffin31 scans the tenant every day and flags settings that went back, so the team can restore them.
The benefit: The hardening doesn’t wear down over time. A change shows up after the next scan, not months later.
What changed
- Security more than doubled. In seven months the score went from 32% to 71%, because the team worked to a clear order of priority.
- The biggest risks closed first. The paths to account takeover, phishing and email impersonation were closed in the first weeks.
- One view of the whole tenant. The team sees at any time what is set right in Entra ID, Exchange and Intune, and what is still open, without checking by hand.
- Gains that last. The daily scan catches any setting that slips back, and the team restores it. The hardening stays in place.
- Less manual work for the team. Griffin31 shows what to fix and why, so the team spends its time fixing, not searching.
Want to see where your tenant stands? A free two-week pilot in your own tenant, read-only, with a security architect who walks you through the findings.