How well is your Microsoft spend protecting, supporting and enhancing your organisation?
Most organisations use a fraction of what their Microsoft 365 licences include, and carry configuration risks they are not aware of. This diagnostic scores your M365 environment across five control areas and delivers a PDF report with practical next steps.
No sign-up required
Tailor for your sector
Health & Care pressure
Health and care organisations using M365 face specific obligations around data residency, external sharing with clinical partners, and the governance of patient data that out-of-the-box configuration does not satisfy.
Risk example
Patient data accessible via external sharing links that have never expired; Defender for Office 365 unconfigured in a clinical environment handling sensitive records.
What is assessed
Five control areas.
Likely operational impact
DSP Toolkit non-compliance, ICO investigation, or a clinical data breach via an unmanaged sharing link.
What it finds
The gaps this diagnostic is built to surface.
- Licences that include Defender, Purview, or Intune that have never been turned on: paid for but providing no protection.
- Security defaults that were left at out-of-the-box settings from deployment day, now years out of date.
- Conditional Access policies that are too permissive, too restrictive, or simply missing for key user groups.
- Email and collaboration security gaps: spoofing protection, external sharing policies, and guest access that has never been reviewed.
- Teams and SharePoint that have grown without governance: data sprawl, stale sites, and permissions that no one manages.
- AI readiness gaps that will block or compromise Copilot deployment because data permissions and labelling are not in order.
What you receive
From the existing diagnostic engine.
- Scored assessment across five M365 control dimensions
- Identification of your highest-priority configuration and governance gaps
- PDF report with practical remediation steps matched to your results
- An indication of AI and Copilot readiness based on current environment maturity
- Clear next steps without a sales call required
What organisations find
“We discovered that Defender for Office 365 had been included in our licence for two years and was completely unconfigured. The review identified that and a further eleven security gaps we were not aware of.”
IT Manager, Professional Services firm
How it works
The diagnostic process.
Choose your sector
The opening question confirms your sector, or accepts the sector passed from the page you were viewing. M365 configuration risks vary significantly by sector.
Answer 15 questions
Five questions across each of the five control areas. Around two minutes. No access to your tenant required.
Receive instant results
Your scored breakdown appears immediately, showing where your M365 environment is well-configured and where the gaps sit.
Download your PDF report
A PDF report with your full results, practical remediation analysis, and prioritised next steps is generated and available to download.
Start the Microsoft 365 Productivity & Control now.
Health & Care has been selected as your sector. The opening question confirms this before the diagnostic begins.
Around 2 minutes · No sign-up · PDF report included · Sector: Health & Care
Need a deeper view?
Need a deeper, adviser-led assessment?
When a self-serve diagnostic is not enough, an adviser-led assessment provides independent, evidence-based findings with written analysis and a practical roadmap.