Identity protection
MFA for every user, Conditional Access policies in Microsoft Entra ID and fewer standing administrator roles.
Microsoft 365 Security
Microsoft 365 security is the configuration of identity, email, devices and data protection inside your Microsoft 365 tenant, still often called Office 365. Umbrella Tech reviews your tenant, then implements and tests the controls your licences support, from multi-factor authentication (MFA) and Conditional Access to Microsoft Defender and Microsoft Purview, so your organisation has a documented, consistent control environment.
The problem
The challenge we help you address
Legacy Office 365 security settings, broad sharing links and inconsistent administrator access build up as a tenant grows. Switching on features without considering users, licensing and business workflows can disrupt work while leaving the real exposure unresolved.
The outcome
What the engagement should deliver
The result is a documented Microsoft 365 security configuration with tested changes, clearer ownership and an improvement plan aligned to your risks. Controls are selected for the environment and licences you actually have, and remaining gaps are recorded with options to close them.
How we can help
Email and collaboration threats
Configure Microsoft Defender for Office 365 protections such as anti-phishing and Safe Links, where your licences include them.
Devices
Bring laptops and phones under Microsoft Intune, with compliance policies that Conditional Access can check.
Information protection
Review external sharing and apply Microsoft Purview sensitivity labels and data loss prevention where they fit.
Monitoring
Confirm audit logging, review Microsoft Secure Score and agree who responds to alerts.
Start with a Microsoft 365 security assessment
If you are unsure what is configured today, a Microsoft 365 Environment Review establishes the current state across security, collaboration and administration before anything changes. Its security findings feed directly into this work, and broader tenant design sits with our Microsoft Cloud services.
Frequently asked questions
Can't see your question? Ask us directly →
What is Microsoft 365 security?
It covers the settings and services that protect accounts, email, files, devices and data in a Microsoft 365 or Office 365 tenant. Much of it is built in; the work is choosing, configuring and maintaining the right controls for your organisation.
When should a business use it?
After a phishing incident or suspicious sign-in, before adopting Microsoft 365 Copilot, when an insurer asks about MFA and email protection, or when nobody has reviewed the tenant since it was first set up.
Will we need different Microsoft licences?
Some controls depend on your subscriptions. We review current entitlements, explain capability gaps and identify where a licence change would support an agreed requirement.
How long does a project take?
It depends on tenant size, the number of controls in scope, how many users and devices are affected and how changes are approved. Scope and timing are confirmed in discovery.
What are the main security or governance considerations?
Keep emergency access accounts outside restrictive policies, pilot changes with representative users and record every exception. Ownership matters too: someone must review alerts, sharing and administrator roles after handover.
Plan the next improvement
Tell us what concerns you most about your environment and what evidence you need to show.