Free Assessment
Free Assessment
Comply

Compliance Benchmarks

CIS Microsoft 365 benchmarks, security baselines, and compliance scoring.

Without a measurable baseline, security is subjective. Twenty-three compliance and governance risks in our register require demonstrable controls — not just policies. The CIS Microsoft 365 Benchmark v6.0.1 provides 170+ prescriptive checks that translate ISO 27001 requirements into verifiable tenant configurations. We measure your current state, remediate gaps, and provide ongoing scoring so that compliance is continuous, not a point-in-time exercise.

Foundation (Plan 1)

  • Exchange CIS Fundamentals — CIS Microsoft 365 Foundations benchmark settings for Exchange Online
  • SharePoint CIS Fundamentals — CIS Microsoft 365 Foundations benchmark settings for SharePoint Online
  • Teams CIS Fundamentals — CIS Microsoft 365 Foundations benchmark settings for Microsoft Teams
  • OneDrive CIS Fundamentals — CIS Microsoft 365 Foundations benchmark settings for OneDrive for Business
  • Entra ID CIS Hardening (Identity) — CIS M365 v6.0.1 Entra ID hardening: guest access, consent, group creation, app registration, PIM approval, device join
  • Entra ID CIS Hardening (Authentication) — CIS M365 v6.0.1 authentication hardening: device code flow, enrollment frequency, authenticator settings, email OTP, session controls
  • Intune CIS Hardening — CIS M365 v6.0.1 Intune hardening: SecureByDefault, personal enrollment, Entra join, device quota, LAPS
  • Microsoft Physical Access Controls — Microsoft-managed physical access controls for datacentres including monitoring, intrusion detection, and access logging
  • Microsoft Environmental Protection — Microsoft-managed fire protection, water damage protection, emergency power, and environmental controls
  • Microsoft Media Handling — Microsoft-managed media storage, sanitization, and disposal procedures
  • Microsoft Datacentre Infrastructure — Microsoft-managed datacentre security including perimeter protection, cabling, and equipment protection
  • Microsoft Equipment Maintenance — Microsoft-managed equipment maintenance and operational procedures

Added in Endpoint (Plan 2)

  • Windows CIS L1 Benchmark — CIS Level 1 security baseline for Windows 11 Enterprise
  • macOS CIS L1 Benchmark — CIS Level 1 security baseline for macOS
  • Chrome CIS L1 Benchmark — CIS Level 1 security baseline for Google Chrome
  • Edge CIS L1 Benchmark — CIS Level 1 security baseline for Microsoft Edge

What you receive

Delivery PackageDurationStakeholdersKey Deliverables
CIS M365 Hardening5–12 daysIT Admin, Security AnalystCIS assessment baseline report; Remediation plan (prioritised by risk); Deployed CIS-compliant configurations
Passwordless & FIDO2 Strategy5–15 daysCISO, IT Admin, End UsersCredential strategy document; Auth method registration policies; FIDO2 key deployment plan
CIS Endpoint Hardening5–15 daysIT Admin, Security AnalystCIS L1 profiles per platform; Policy exception documentation; Compliance reporting baseline

ISO 27001 controls covered