GolshTech IT Consulting Call us01256 674258

Microsoft 365 & IT security assessments

Fixed-price assessments that show you exactly where you stand, and what to fix first.

Know where you stand

Most organisations rely on Microsoft 365 and their wider IT environment every day, but few have a clear, independent view of how well it is secured and how resilient it really is.

Settings drift, accounts accumulate, and recommendations pile up without anyone having the time to work out which ones matter. Our assessments give you that view. We review your environment against recognised good practice, explain every finding in plain English, and give you a prioritised plan you can act on, whether you carry out the work yourselves or ask us to help.

How our assessments work

  • Focused scopeOne Microsoft 365 tenant is in scope.
  • Representative sampleWe review a representative sample of your endpoints rather than every device.
  • Remote deliveryDelivered entirely remotely, with minimal disruption to your team.
  • Non-intrusiveNo intrusive testing, vulnerability scanning or live recovery exercises. The assessment itself does not change your systems; any remediation is agreed separately.
  • Building blocksEach tier includes everything in the tier before it, so you can choose the depth that suits you.

Three assessment tiers

See pricing

Essentials

A focused review of the Microsoft 365 controls that stop the most common attacks.

What we assess

  • MFA registration, authentication methods and policy coverage
  • Conditional Access or Security Defaults, including exclusions
  • Global Administrator and other privileged role assignments
  • An audit of user accounts
  • SPF, DKIM, DMARC, external forwarding and anti-phishing controls
  • Device deployment configuration audit

What you receive

  • Executive summary and a rating for each area assessed
  • Evidence-backed findings with plain-English risk explanations
  • Recommended corrective action, priority and indicative effort
  • A prioritised action plan
  • One report and findings meeting to walk you through the results

Enhanced

Most popular

Everything in Essentials, extended to collaboration, endpoints, Active Directory and your network.

Includes Essentials, plus

  • SharePoint, OneDrive and Teams external access
  • Enterprise applications, audit logging and available alerts
  • Operating system support, security updates and endpoint protection
  • Active Directory health, replication, DNS, certificates, privileged groups and Entra synchronisation
  • Network segmentation, VLANs and management access
  • Relevant Microsoft Secure Score recommendations, interpreted in context

What you receive

  • A detailed technical report as well as the executive summary
  • An evidence-backed risk register
  • A simple network or service diagram, where applicable
  • Suggested remediation work packages
  • A technical findings workshop

Comprehensive

Everything in Enhanced, plus the strategic and financial view your leadership team needs to plan ahead.

Includes Enhanced, plus

  • Budgetary overview and planning
  • Licences and contracts review
  • Device capacity and specification audit, with recommendations
  • Data protection policies for AI usage
  • Infrastructure resilience audit

What you receive

  • All Enhanced deliverables
  • Findings and recommendations for budget, licensing, device and resilience planning

What each tier includes

Assessment areaEssentialsEnhancedComprehensive
Microsoft 365 security essentials
MFA and authentication methods✓✓✓
Conditional Access / Security Defaults✓✓✓
Privileged role assignments✓✓✓
User account audit✓✓✓
Email security (SPF, DKIM, DMARC, anti-phishing)✓✓✓
Secure Score recommendations in context✓✓✓
Device deployment configuration✓✓✓
Collaboration, endpoints and infrastructure
SharePoint, OneDrive and Teams external access–✓✓
Enterprise apps, audit logging and alerts–✓✓
OS support, updates and endpoint protection–✓✓
Active Directory and Entra synchronisation–✓✓
Network segmentation and management access–✓✓
Strategy, investment and resilience
Budgetary overview and planning––✓
Licences and contracts review––✓
Device capacity and specification––✓
Data protection policies for AI usage––✓
Infrastructure resilience––✓
What you receive
Executive summary, ratings and prioritised action plan✓✓✓
Detailed technical report and risk register–✓✓
Network or service diagram (where applicable)–✓✓
Remediation work packages–✓✓
Technical findings workshop–✓✓
Budget, licensing and investment recommendations––✓

Pricing

Every assessment is fixed price, so you know the full cost before we start. Pricing is based on the number of users in your organisation.

AssessmentUp to 75 users76–250 users251–500 users
Essentials£1,695£2,895£4,295
Enhanced£2,995£4,995£7,495
Comprehensive£5,995£9,495£13,995

All prices exclude VAT. For organisations with more than 500 users, or more than one Microsoft 365 tenant, contact us for a tailored quote.

Beyond the assessment

An assessment is the starting point. We offer straightforward ways to act on the findings and keep your environment in good shape.

  • Assessment fee creditBook remediation work with us within 30 days of your report and we’ll credit part of your assessment fee against it.
  • Fixed-price remediationThe recommendations in your report are grouped into clearly scoped work packages, each at a fixed price.
  • Annual reassessmentRepeat your assessment a year later at a 20% discount and measure your progress.

Optional add-ons

  • Additional Microsoft 365 tenant
  • On-site management presentation (plus travel)
  • Cyber Essentials readiness review, from £650

Ready to find out where you stand?

Get in touch to arrange a short scoping call. We’ll confirm the right tier for your organisation and give you a fixed price before any work begins.

Request a scoping call

Enter an email address we can reply to, like name@company.co.uk.
Add a short message so we know what you need.

Your message goes straight to info@golshtech.co.uk. You’ll get an email confirming it arrived, and we only use your address to reply.