Microsoft 365 Security 30 Days Service — Tenant Security Configuration & Protection

Microsoft 365 Security 30 Days Service is a 30-day engagement for organizations that already have a Microsoft 365 tenant and need a basic secured Microsoft 365 environment planned, configured, and validated. IT Partner assesses the current tenant and security configuration, applies core Microsoft 365 security settings, works the Microsoft Secure Score toward the 75% target, validates key security outcomes, and provides a project closeout report.

The service includes core Microsoft 365 tenant security configuration — basic admin protections, logging and analytics configuration, and basic identity protection setup — plus Microsoft Secure Score configuration up to the 75% target, threat protection enforcement, Microsoft Entra ID Protection configuration, Teams protection configuration, validation of threat protection and identity settings, Exchange Online Protection validation, and a project closeout report.

The stated success criteria are Microsoft Secure Score improved toward the 75% target and confirmable in the Microsoft Defender portal, validated threat protection settings, validated identity and access management settings, Exchange Online Protection configured and working, and Teams protection configured. These outcomes are validated during the engagement and summarized in the project closeout report.

The service duration is 30 days. During that period, IT Partner runs the kickoff, assesses the current configuration, performs security configuration, verifies settings, verifies the security score, addresses issues if any, and sends the final project communication.

The service is $2,000 per project, quoted fixed-price in writing before work begins. Additional Microsoft licenses that some security capabilities require are not included, so total cost should be confirmed against the tenant's current licensing.

The required prerequisite is an existing Microsoft 365 tenant. Because the service configures and validates security in an existing tenant, organizations that do not yet have a tenant should confirm with IT Partner whether a separate setup service is needed first.

The engagement starts with a kickoff meeting, then IT Partner checks the security scope and assesses the current Microsoft 365 configuration. The plan continues with user creation or Microsoft Entra Connect configuration if required, security configuration, verification of security settings, verification of the Secure Score, the final project summary, and fixing of issues if any are found.

Yes, Teams protection is included in the defined scope. IT Partner configures Teams with three tiers of protection, including sharing, classification, data loss prevention, and Microsoft Purview Information Protection sensitivity labels, and Teams protection is one of the stated success criteria.

Yes, Microsoft Entra ID Protection configuration is included. The service also validates identity and access management settings as part of the expected security outcomes. Risk-based policies depend on Microsoft Entra ID P2 licensing, which is confirmed during assessment.

No. Endpoint detection and response implementation — for example, Microsoft Defender for Endpoint deployment and device onboarding — is not a deliverable of this service. If EDR rollout is required, it is scoped separately with IT Partner.

The service requires no planned Microsoft 365 downtime. Because security changes can affect sign-in, sharing, access policies, mail protection, and Teams behavior, potentially user-impacting settings are reviewed with your point of contact and scheduled appropriately before they are applied.

The service does not include additional licenses, customer team training, corporate document migration to SharePoint Online, desktop software settings, or Information Security Advisory services. More extensive documentation than the project closeout report is also not included but may be available for an additional fee.