// service

Security and health assessment

Know where you stand. I map your Azure and Microsoft 365 environment and turn my findings into concrete improvements, sorted by impact. You choose the focus: security only, or the health of your entire environment.

When is this for you?

  • You want to know how secure your environment really is, for example for NIS2 or an audit
  • Your Azure environment grew quickly and you've lost the overview
  • You want to start using AI or Microsoft 365 Copilot and want the basics in place first
  • You want an independent view before you invest

Two variants

Focus: security

Security assessment

An in-depth check of your security in Azure and Microsoft 365, benchmarked against the CIS Benchmarks and NIS2 measures.

  • Identity and access: Conditional Access, MFA, admin rights, guest accounts
  • Microsoft Defender settings and Secure Score
  • Email, sharing and collaboration in Exchange, SharePoint, OneDrive and Teams
  • Devices: Intune compliance and security baselines
  • Data: sensitivity labels and DLP
  • Azure: Defender for Cloud, network security, Key Vault and logging
Focus: all WAF pillars

Health assessment

A broad health check of your Azure environment across the five pillars of the Microsoft Well-Architected Framework, plus governance according to the Cloud Adoption Framework.

  • Reliability: availability, backup and recovery, tested against your recovery objectives (RTO and RPO)
  • Security: identity, network and data protection
  • Cost optimisation: oversized or unused resources, reservations
  • Operational excellence: monitoring, automation, Infrastructure as Code
  • Performance efficiency: scalability and the right services
  • Governance: management groups, Azure Policy, tags and RBAC

My approach

  1. Intake

    Together we set the goals, scope and focus: security or health. I work with read-only access, so nothing changes in your environment.

  2. Collect data

    I use tools such as Microsoft Secure Score, Defender for Cloud, Azure Advisor, Azure Resource Graph and my own PowerShell scripts.

  3. Analysis and interviews

    I test the findings against best practices and discuss them with your administrators, so the picture matches reality.

  4. Report and presentation

    You get the findings per risk, with quick wins and a roadmap, and a presentation for both technical staff and management.

  5. Improve (optional)

    Want me to implement the improvements as well? Then we'll pick them up together.

What you get

  • A report with findings and risk ratings (high, medium, low)
  • Quick wins you can act on right away
  • A roadmap with next steps
  • A management summary
  • A presentation or workshop of the results
Kelson
// my experience

My experience

I carry out security assessments of Azure and Microsoft 365 environments and have been running health and readiness assessments of Azure and Microsoft 365 for years, focused on performance, stability, cost and security.

// contact

Shall we talk?

Would you like a website, or help with your cloud environment? Send me a message.

info@kelson365.com