Identity

MS365 AssessmentNew

Performs a scored, control-by-control security baseline assessment of your Microsoft 365 tenant — measuring identity, email, device, data, and monitoring controls against best practice and producing a prioritised gap remediation list.

Get a Demo Login to App

MS365 Assessment

Scored security baseline assessment for your M365 tenant

What it does

Key capabilities

Overall Tenant Score

A single 0–100 score across five domains: Identity, Email, Device, Data, and Monitoring — with domain-level breakdowns for targeted remediation.

Control-by-Control Assessment

Each control is evaluated as Pass, Fail, or Partial with a risk level — giving you a clear, prioritised remediation list.

MFA & Authentication Controls

Assesses MFA enforcement, legacy authentication blocking, and conditional access policies across all users and admin accounts.

Email Security Controls

Validates DKIM, DMARC, SPF, anti-phishing policies, and safe links/attachments configuration against baseline standards.

Data & Monitoring Controls

Checks data loss prevention policies, audit logging configuration, and alerting coverage against Microsoft security best practices.

Scheduled Reassessment

Run assessments on a schedule to track your score over time — demonstrate continuous improvement to auditors and leadership.

Highlights

Why MS365 Assessment?

  • Scored 0–100 across Identity, Email, Device, Data, and Monitoring domains
  • Per-control Pass/Fail/Partial with risk level and remediation guidance
  • Feeds failed High/Critical controls directly into Alert Triage Queue
  • Scheduled reassessment to track posture improvement
  • Dual-mode connector — Isolated App Registration or Multi-tenant
Request Demo Talk to us
Included in OneView

MS365 Assessment is part of the Hakware OneView platform. All findings, events, and data from this module flow into your central dashboard alongside every other security signal in your environment.

24/7 Support Available
Phone: +27 060 984 1210
FAQs

Frequently asked questions

The 0–100 score is a weighted average across five security domains: Identity (MFA, Conditional Access, legacy authentication blocking), Email (DKIM, DMARC, SPF, anti-phishing), Device (Intune enrolment, compliance policies), Data (DLP, sensitivity labels, audit log configuration), and Monitoring (alerting policies, security defaults). Each domain score reflects the proportion of controls passing within it.

Failed controls rated Critical or High are automatically forwarded to the Alert Triage Queue as security alerts, where they are assigned to the analyst inbox for review and remediation tracking. This ensures critical M365 configuration gaps do not sit unnoticed in a dashboard — they enter the same operational workflow as threat alerts.

MS365 Assessment supports two connection modes. Isolated App Registration creates a dedicated Azure AD app with the minimum permissions needed for assessment — no admin consent required from the customer. Multi-tenant mode uses a shared Hakware app registration that the customer grants consent to once. The isolated mode is preferred for data isolation and when customers have strict app registration governance.

MS365 Auditor focuses on ongoing monitoring — sign-in anomalies, user risk profiling, and MFA enforcement tracking over time. MS365 Assessment is a structured baseline scoring tool — it runs a comprehensive control-by-control assessment of your tenant configuration at a point in time (or on a schedule) and produces a scored gap report. The two modules are complementary: Assessment identifies what to fix; Auditor monitors it continuously.

Related modules

Microsoft 365 Auditor

Complete security visibility for your M365 tenant

Learn more

Permission ManagerNew

SharePoint and identity access governance

Learn more

On-Premises AD AuditNew

Deep security auditing for Active Directory

Learn more

See MS365 Assessment in action

Request a personalised demo and we'll show you exactly how MS365 Assessment works within your environment.

Request Free Demo All Modules