FR — EN Get in touch
Free resource — 5 minutes, no email

Where does your Microsoft 365 actually stand?

Fifteen questions, one answer each, and an immediate result: your score, your weak points, and the order to fix them in. It's the interactive version of the checklist — same controls, same method, in five minutes.

No sign-up No data sent Everything runs in your browser Instant result
Question 0 of 15 answered
Control 01 / 15 — Secure Score

Do you know the security score Microsoft continuously calculates for your tenant?

Where to check : Defender portal → Exposure management → Secure Score
Control 02 / 15 — Dormant accounts

How many active accounts haven't been used in more than ninety days?

Where to check : Entra → Identity → Users, with the last sign-in column
Control 03 / 15 — Administrators

How many people are Global Administrator of your tenant?

Where to check : Entra → Identity → Roles and administrators → Global Administrator
Control 04 / 15 — Multi-factor authentication

Is MFA enforced for everyone, and through which method?

Where to check : Entra → Protection → Authentication methods
Control 05 / 15 — Conditional access

Do rules decide whether to allow or block a sign-in based on its context?

Where to check : Entra → Protection → Conditional Access → Policies (Entra ID P1 licence)
Control 06 / 15 — Legacy authentication

Can legacy mail protocols still connect to your tenant?

Where to check : Entra → Monitoring → Sign-in logs, filtered on legacy authentication clients
Control 07 / 15 — Mail forwarding

Can a user automatically forward all their email to an outside address?

Where to check : Defender → Threat policies → Anti-spam outbound, and Anti-phishing
Control 08 / 15 — External file sharing

Who can receive a link to your documents, and do those links expire?

Where to check : SharePoint admin center → Policies → Sharing
Control 09 / 15 — Employee offboarding

When someone leaves, what exactly happens, and who does it?

Where to check : Not on any screen: take the last person who left and check their account
Control 10 / 15 — Audit logging

Is unified audit logging turned on, and how long are the records kept?

Where to check : Purview portal → Audit
Control 11 / 15 — Passwords

Can a user reset their own password securely, and do you still force periodic changes?

Where to check : Entra → Protection → Password reset
Control 12 / 15 — Backup

If all your email and files were deleted or encrypted today, how would you recover them six months from now?

Where to check : Look for a third-party solution: this is not a native Microsoft 365 feature
Control 13 / 15 — Devices

Is company data reachable from unmanaged personal devices?

Where to check : Intune admin center → Devices → Compliance
Control 14 / 15 — External guests

How many outside people have access to your tenant, and since when?

Where to check : Entra → Identity → Users, filtered on user type Guest
Control 15 / 15 — Risky sign-ins

What happens when Microsoft flags a suspicious sign-in — unusual country, anonymised address, leaked password?

Where to check : Entra → Protection → Identity Protection (automatic policies need Entra ID P2)
No answer ever leaves your browser