Office365 Secure Score

[Techie2000]

Does anyone use the Office 365 Secure Score security analytics tool? (https://securescore.office.com)

 

I started working on our organisation account and was surprised at how likely we were to get a breach! Since then we have implemented a number of changes.

 

Would just be interested to see how many people are activity using the tool to secure their organisations email/ sites.

[FN-GM]

It is a little daft that it doesn't take into account of services you don't use. For example I am being scored lower due to my Lync security settings. I don't have any users licenced to use Lync.

[andrew150690]

We are currently implementing changes to our Office 365 domain in line with the Office 365 Secure score, some improvements are fairly straight forward (Running reports, setting up MFA's and disabling certain rule) A few of the options are a little more in depth and require PowerShell to implement.

 

Our score has now improved from 36 to 217 however, I expect this to increase further once Microsoft release further updates to be able to score some of the options.

[synaesthesia]

Cheers for that, very handy little tool with some simple but effective hints. Email forwarding is a big one for a lot of schools; you don't need it, and in fact it'll be in possible breach of GDPR if forwarders are set to external addresses. Same goes for email rules too.

We can bulk our score up by 150 points immediately with no user impact and will now look at doing this as soon as next week; things like MFA for admins. Stupidly simple but often slips the mind!