The Microsoft 365 audit report, page by page
A Microsoft 365 security audit report designed to be read and acted on: what is at risk, what to fix, how and in what order, what has changed since last month. For management and the IT team alike.
The summary page, in four points
The first page answers the question management asks: where do we stand? Four markers to find your way around.
Your protection level
A single “risk protection score”, weighted by domain, and the number of controls per status.
What has changed
How the score has moved over recent audits: progress, standstill or drift.
A written analysis
A few paragraphs that explain the situation in plain language, without jargon.
Domain by domain
The score, items to address, trend and weight of each domain in the overall score.
Three deliverables, one for each reader
Every month, the reports are placed in SharePoint, and a summary is sent by email.
| Deliverable | For whom | What it contains |
|---|---|---|
| Interactive HTML report | CIO, CISO, IT team | Scores by domain, detail of each control, Quick Wins, remediation links, history. |
| PDF summary | Management | Executive summary and key indicators, printable and easy to archive. |
| Excel export | IT team | Every detail, one tab per domain, filterable and sortable. |
| Email summary | Everyone | The score, how it has changed and any new items, as soon as the audit finishes. |
The detail of each domain
Each domain (Entra ID, Exchange Online, Teams, SharePoint, OneDrive) has its own page: the key takeaways, key indicators such as MFA coverage, the health of each section over recent audits, then each control with the expected value, the observed value, its criticality, its CIS and ANSSI references, and the concrete actions to take to fix it, with remediation links.
Prioritise: Quick Wins and risk/effort matrix
Not all gaps are equal. The report weighs the impact of each item (its criticality) against the estimated remediation effort. Quick Wins, with high impact and low effort, are listed first: that is where your teams start.
Measure: progress audit after audit
The history shows how the overall score and each domain's score have changed, a summary of past audits and status changes from one month to the next: what has been fixed, what has regressed, and which non-compliances keep coming back.
Track adoption, Copilot included
A management page shows how Microsoft 365 is actually used: active users, adoption by application (Teams, SharePoint, OneDrive, Exchange), email activity, storage, and Microsoft 365 Copilot adoption for the accounts that have it. Useful for directing training and checking that an investment is being used.
Optimise your licences
Licences assigned to accounts inactive for more than 90 days, unused seats, duplicate service plans, shared mailboxes carrying a licence: the report identifies licences you pay for without using them and quantifies the possible savings, in CFP francs (XPF) or euros.
A report everyone can read
Technical terms (MFA, DMARC, Conditional Access, break-glass…) are explained in tooltips and in a glossary built into the report. You can also find it in our Microsoft 365 security glossary.
-
Interactive HTMLDetailed report
CIO, CISO and IT team
-
PDFSummary
Management
-
ExcelFull export
IT team
-
EmailEmail summary
All recipients
The score and its colours are identical in the HTML report, the PDF, the email and the history. The calculation is detailed in our method.
Ready to see what your tenant is hiding? First report within 48 h.
A subscription, an automatic audit every month, nothing to launch. A first conversation is enough to get started. We work in New Caledonia, French Polynesia and France.
- New Caledonia+687 24 23 22
- French Polynesia+689 40 42 90 79
- France+33 2 96 47 48 05