Microsoft 365 Governance
A CyberASM service offering
Overview
Govern how Microsoft Teams, SharePoint sites, Microsoft 365 groups, Planner plans, and Viva Engage communities are requested, provisioned, and reviewed. Approved self-service helps users work efficiently while administrators retain control over access and lifecycle policies.
EasyEntra supports Entra ID and hybrid Active Directory administration, including user lifecycle, group membership, and MFA settings. These capabilities can complement a broader Microsoft 365 governance engagement.
Teams & SharePoint
Overview
ProvisionPoint supports governance, provisioning, and lifecycle management for Microsoft Teams, SharePoint sites, Microsoft 365 groups, and Viva Engage communities.
Key capabilities include:
• Workspace Governance: Apply consistent policies while giving users approved self-service and administrators oversight of workspaces and access.
• Provisioning: The platform supports the provisioning of various Microsoft 365 objects, including Teams, SharePoint Sites, Groups, and more. It allows for the creation of different types of workspaces with varying levels of security and governance.
• Approval Workflows: Define approval processes for workspace requests and other actions, including deletion where required.
• Lifecycle Management: Configure expiry and review processes for sites, Teams, and groups to support your organisation's retention policies.
• Compliance Support: Apply governance policies across workspaces and data while keeping user processes manageable.
• Audit Reporting: Use reports on guest users, file sharing, orphaned accounts, and other workspace activity to support reviews.
Entra ID User Management
Overview
Simplify the management of Microsoft 365 tenants and hybrid Active Directory (AD) environments.
Additional capabilities include:
• Automated User Onboarding and Offboarding: The platform automates user onboarding and offboarding processes, reducing the time and effort required for these tasks.
• Multi-Tenant and Multi-Domain Management: A single-pane-of-glass solution for managing multiple tenants and Active Directories.
• Eliminates Complexity: Makes your Microsoft 365 management efficient and intuitive, whether your environment is hybrid or cloud-only.
• Identify Inactive Users: Helps identify inactive users and improve tenant hygiene for more efficient administration.
• Licence Reporting: The platform provides detailed reports on licence usage, helping you cut costs by identifying and reclaiming unused or underutilised licences.
• Reduced Manual Work: Automating routine user-management tasks can reduce support effort and improve consistency.
Active Directory Auditing and Reporting
Overview
Active Directory auditing and reporting can improve visibility into configured directory, server, file-server, and workstation activity.
Key capabilities include:
• Change Auditing: Review recorded logons, group changes, policy updates, and other configured events.
• User Behaviour Analytics: Use activity patterns to help identify anomalies for investigation.
• Compliance Reporting: Generate audit evidence that can support reviews against requirements such as SOX, PCI DSS, and GDPR.
• Alerts and Notifications: Configure alerts for selected events and changes that need review.
• Dashboards and Reports: Use visual summaries and configurable reports to review user activity and security changes.
Entra ID MFA and Conditional Access
Overview
Assess your Microsoft Entra ID multi-factor authentication (MFA) coverage and Conditional Access policies to identify configuration gaps.
Review areas such as:
• MFA and Conditional Access: Check enforcement coverage for privileged accounts and access to sensitive systems, and identify policies that may need adjustment.
• Policy Review: Review controls for MFA, device compliance, and risky sign-ins, then test representative access scenarios.
• Privileged Access: Review administrative roles and identify opportunities to reduce standing privilege.
• Third-Party App Permissions: Review application permissions and identify grants that may exceed business requirements.
• Alerts and Audit Logs: Review alerting and logging for high-risk events such as role changes and suspicious sign-ins.
• Ongoing Review: Reassess MFA and Conditional Access as your environment and requirements change.