Inconsistent identity and device policies make it difficult to know which access is protected. This four-week engagement implements the selected Microsoft 365 security plan in one tenant, with a tested pilot, recovery plan and named operating owners.
Scope and boundaries
Basic covers assessment, Microsoft Intune and Microsoft Entra ID setup, and multifactor authentication for up to 100 devices. Standard adds 12 to 20 agreed Conditional Access policies and Microsoft Defender for Endpoint policies for up to 250 devices. Premium adds advanced baselines and compliance setup for up to 500 devices.
The signed scope fixes the pilot subset, production waves, acceptance tests and support handoff. Compliance setup does not confer certification. Microsoft Configuration Manager migration, Active Directory retirement, Microsoft Purview governance, desktop migration and ongoing support are separate. Accepted shared policies are reused.
Key Features
Basic: identity and device foundation, up to 100 devices
Standard: Conditional Access and endpoint protection, up to 250 devices
Premium: advanced baselines and compliance setup, up to 500 devices
Customer-approved pilot, production wave and operating handoff
Ideal For
A Microsoft 365 tenant with inconsistent identity and device controls
An organization ready to implement an agreed security baseline
Key Benefits
A documented baseline with named owners
Pilot evidence before broader rollout
A recovery path for approved changes
Accepted policies reused in later work
Related resource
Microsoft 365 AI Security and Governance Checklist
The identity, data and governance controls to verify in your tenant before Copilot and agents are switched on.
Preview the M365 AI Security and Governance ChecklistPlan your Marketplace purchase
Request a Microsoft Marketplace private offer for this scope. Before ordering, we will confirm the supported transaction route, agreed terms and availability. Microsoft licenses and consumption are separate. Professional-service fees do not count toward MACC.
Bring the relevant inventory, owners and priorities to a scoping conversation. Request the applicable service terms before committing; support scope is fixed in the accepted agreement.