Microsoft 365 Security 90 Days Service — Tenant Security Configuration

Microsoft 365 Security 90 Days Service is a Microsoft 365 security configuration engagement for organizations that already have a Microsoft 365 tenant and need IT Partner to assess current security settings, configure core protections, validate those settings, and provide a closeout report. The listed SKU is ITPWW040SECOT, the listed price is 4000, and the service manager is Roman Sotnik.

The service includes current tenant and security configuration assessment, core Microsoft 365 tenant security configuration, basic admin protections, logging and analytics configuration, basic identity protection setup, MFA enforcement, conditional access policies, threat protection validation, and security score configuration up to 75%. It can also include Microsoft Defender for Cloud Apps connection, Azure Active Directory Identity Protection, Teams protection configuration, Microsoft Sentinel initial configuration with basic Microsoft 365 connectors, Entra ID Privileged Identity Management, PAWs for admin activity, SIEM logging configuration, and a project closeout report.

The service does not include additional licenses that may be required, customer team training, corporate document migration to SharePoint Online, desktop software settings, or Information Security Advisory services. More extensive documentation is also outside the standard scope and may be available for an additional fee.

The service content lists a duration of 30 days, even though the public title says "Microsoft 365 Security 90 Days Service." Because those two facts are inconsistent, buyers should confirm the correct public duration with IT Partner before purchase or scheduling.

The listed price for the Microsoft 365 Security 90 Days Service is 4000 for SKU ITPWW040SECOT. Any additional Microsoft licenses, added training, advisory work, migration services, or expanded documentation are not included in that listed service scope and should be confirmed separately with IT Partner.

The stated prerequisite is that the organization must already have a Microsoft 365 tenant. The client should also be ready to provide a dedicated point of contact, coordinate staff schedules, approve deliverables, and assist with identifying high-risk users such as administrators, executives, and VIP users.

The engagement typically starts with a kickoff meeting, followed by a security scope check and current configuration assessment, user creation or AD Connect configuration where applicable, security configuration, security settings verification, security score verification, final email, and issue fixing if needed. The implementation plan may vary depending on the organization’s needs, so detailed milestone activities should be confirmed with IT Partner.

IT Partner configures core Microsoft 365 security areas including basic admin protections, logging and analytics, identity protection, MFA enforcement, conditional access policies, threat protection, Exchange Online Protection, Teams protection, and Microsoft 365 security score improvements up to 75%. The service may also cover Microsoft Defender for Cloud Apps, Azure Active Directory Identity Protection, Microsoft Sentinel initial configuration, Entra ID Privileged Identity Management, PAWs, and SIEM logging integration as stated in the service scope.

Yes, the stated IT Partner responsibilities include enabling and enforcing MFA for all users. Because MFA changes can affect user sign-in behavior, the client should be prepared to support end users and coordinate internal communications during rollout.

Yes, the service includes implementation of a set of conditional access and related policies. The exact policy design may depend on the tenant’s licensing, current configuration, business requirements, and risk profile, so final policy details should be reviewed during the engagement.

Yes, the service includes enforcing threat protection, for example by connecting Microsoft 365 to Microsoft Defender for Cloud Apps, and reviewing sharing risk using built-in Defender for Cloud Apps reports on the Investigate tab. It also includes validation of threat protection settings as part of the success criteria.

Yes, the service includes Teams protection configuration with three tiers of protection, including sharing, classification, data loss prevention, and Azure Information Protection. Teams protection being configured is also listed as a success criterion.

Yes, the service includes Microsoft Sentinel initial configuration, such as basic Microsoft 365 connectors, and SIEM tool configuration to collect logging data from Office 365, Defender for Cloud Apps, and other services including AD FS. This is important because the audit log stores data for only 90 days, and sending data to a SIEM can allow longer retention depending on the SIEM configuration and licensing.

The service includes checking the Microsoft security score and configuring it up to 75%. The success criteria state that the user can access the Security Portal and confirm the 75% security score.

The service content does not specify planned downtime or a guaranteed no-downtime implementation. Because changes such as MFA enforcement, conditional access policies, identity protection, and admin security controls can affect sign-in and access behavior, scheduling and user impact should be reviewed with IT Partner before changes are applied.

IT Partner is responsible for gathering current tenant and security configuration information, configuring core Microsoft 365 security protections, checking and improving security score up to 75%, enforcing threat protection, configuring identity protection, configuring Teams protections, setting up initial Microsoft Sentinel or SIEM logging where applicable, enabling MFA, and implementing conditional access policies. IT Partner also performs security settings verification and provides a project closeout report.

The client is responsible for coordinating internal resources and schedules, providing a dedicated point of contact, coordinating outside vendors, making required DNS changes, configuring network equipment such as load balancers, routers, firewalls, and switches, reviewing and approving deliverables, identifying high-risk users, and providing end user support. These responsibilities are important because security changes often require coordination across IT, networking, leadership, and user support teams.

The service content contains an inconsistency: it states the project is successful when all user data is fully migrated from Gmail and Google Drive to the Microsoft 365 tenant, but the primary service scope is Microsoft 365 security configuration and corporate document migration to SharePoint Online is listed as an additional-cost service. Buyers should confirm with IT Partner whether Gmail or Google Drive migration is actually included and whether it is an acceptance criterion for this engagement.

At the end of the service, IT Partner provides a project closeout report indicating final project status, acceptance criteria matching, any outstanding issues, and the final budget. The engagement also includes validation of security settings, security score verification, and issue fixing if required within the stated service process.

After configuration, the service includes verification of security settings, verification of the security score, a final email, and fixing of issues if any are identified. The stated responsibilities also include at least monthly checkups of dashboards and reports in the Microsoft 365 Defender portal and Defender for Cloud Apps, but the exact post-completion monitoring period and operational handoff should be confirmed with IT Partner.