Free Microsoft 365 Readiness Check

How secure and well-managed is your Microsoft 365?

13 quick questions on sign-in security, admin access, sharing, email, backup, and devices. Get a status and a prioritized list of next steps.

Step 1 of 425%
Is multi-factor authentication (MFA) required for every user?
Identity · Q1

Enforced for all accounts, with no users able to skip it.

Do you use Conditional Access policies (for example, blocking legacy sign-in or risky locations)?
Identity · Q2

Conditional Access requires Business Premium or equivalent licensing.

Are global admin accounts limited (2 to 4), separate from daily-use accounts, and protected with MFA?
Admin accounts · Q3

Admins should not read email or browse with their admin account.

Is there a documented process for account recovery and offboarding departing staff?
Account recovery · Q4

Including resetting passwords, revoking sessions, and converting mailboxes.

Is access limited to managed or compliant devices (for example, via Intune)?
Device access · Q5

Personal devices accessing company data should meet minimum security requirements.

Answer every question on this step to continue.

Your progress is saved automatically as you go.