Frequently asked questions

Sentinel Audit365 is an automated Microsoft 365 security audit solution developed and operated by SF2i. Every month it runs more than 180 read-only checks on your tenant (Entra ID, Exchange Online, Teams, SharePoint, OneDrive), maps them to the CIS, ANSSI and Microsoft frameworks and delivers an actionable, prioritised report.

Small and medium-sized businesses that use Microsoft 365 in New Caledonia, French Polynesia and France, particularly those without a dedicated security team.

More than 180 controls on each run, covering Entra ID, Exchange Online, Teams, SharePoint, OneDrive, governance and licences. See the controls domain by domain.

Secure Score is a tool built into Microsoft 365 that measures posture against Microsoft's recommendations. Sentinel Audit365 is an audit solution that runs automatically every month on a platform hosted by SF2i: more than 180 checks mapped to the CIS, ANSSI and Microsoft frameworks, and an actionable, prioritised report readable by management. See the full comparison.

No. The audit is 100% read-only: it reads your configuration through the Microsoft 365 APIs and does not change any setting.

Nothing on your workstations or servers: no agent is deployed. Only a read-only audit application is registered in your Microsoft 365 tenant, and SF2i creates and configures it for you. The audit platform is hosted and monitored by SF2i, and the connection to your tenant uses a certificate.

Delegated access, just long enough for SF2i to register the audit application in your tenant. Subsequent audits go through this application, read-only and using a certificate, with no action needed on your part.

The checks adapt to the licences in your tenant. Some protections, such as Safe Links and Safe Attachments, are only included with Microsoft Defender for Office 365: if your licence does not include them, the report says so clearly.

A weighted protection score, a written analysis, the detail of each domain and each control with the steps to fix it, Quick Wins, a risk/effort matrix, history, service adoption and potential licence savings. See the report page by page.

Three deliverables are placed in your SharePoint: an interactive HTML report for the CIO, the CISO and IT, a PDF summary for management and an Excel export for the technical team. A summary is sent by email.

Each control has a criticality from 1 to 5. Each domain's score is weighted by that criticality, then the overall score weights the domains by the risk they carry: Exchange Online 45%, Entra ID 37%, SharePoint 7%, Teams 6%, OneDrive 5%. The details are on the method page.

Once a month. The report shows how the score changes from one audit to the next.

Sentinel Audit365 is a subscription. SF2i sets up the connection to your tenant once, then the audit runs automatically every month: each report is placed in your SharePoint, with a summary by email. The price depends on the size of your tenant. It is set out in your quote, along with the commitment period.

Sentinel Audit365 accesses your tenant only through the audit application registered in it. When the subscription ends, the application is deleted and access is cut off. You can also delete it yourself at any time from Entra ID. Reports already delivered stay in your SharePoint.

The first report is delivered within 48 hours, once access and the connection are set up.

Each item to address comes with the steps to fix it, and the Quick Wins show where to start. Your teams can handle it, or SF2i can support you.

The price depends on the size of your tenant. Contact us for a quote.