Purview, DLP, retention, sensitivity labels, and mapping Microsoft 365 controls to CIS, NIST CSF, Essential Eight, and cyber insurance requirements.
The NIST CSF 2.0 draft expands the framework to every organization. Here is what changed and a full enablement guide mapping Microsoft 365 security controls, licensing, and scripts to the framework.
CISA's SCuBA project gives you a checklist. A real hardening program needs CIS mapping, licensing notes, setup steps, user-impact warnings, and scripts for every control across all six M365 workloads.
Premiums up 79%, coverage shrinking, questionnaires growing. Here is what the cyber insurance market is telling MSPs, and five predictions for how underwriting changes from 2023 onward.
CISA's SCuBA project pairs a free M365 security baseline with ScubaGear, a PowerShell tool that grades your tenant against it. Setup steps, licensing gotchas, and a CIS Controls mapping.
DLP and information protection used to be Enterprise-only. As of 2019 they ship with M365 Business and several other SKUs. Here is what the setup covers and which licenses qualify.
Office 365 DLP can find and protect PII like credit card, SSN, and health records across Exchange, OneDrive, and SharePoint. Here is a HIPAA policy built from template to report.
NIST 800-171 has 109 requirements. Microsoft's Compliance Manager turns them into a scored, assignable assessment inside Office 365. Here is how to build it.
