Microsoft 365 Security Baselines

Microsoft 365, hardened properly.

Best-practice security configuration across your Microsoft 365 tenant — applied, maintained and monitored for drift.

Get a quoteWhat we cover
Cyber Essentials Plus certified20 years · Est. 2006130+ organisations supportedFixed monthly pricing
Cyber Essentials Plus certifiedMicrosoft & Fortinet partnerOldham Business Awards 2022 winnerDBS-cleared engineersUK-based helpdesk

Quick answer

Microsoft 365 security baselines are a set of best-practice security policies applied consistently across your Microsoft 365 environment — identity, devices, email and collaboration — to protect against common attacks. Foresight configures and continuously maintains these baselines for organisations across Greater Manchester and the UK using the Inforcer platform, keeping your settings aligned to CIS, NIST and Cyber Essentials best practice even as Microsoft changes.

What we cover

Best practice, applied and maintained

Enterprise-grade hardening across identity, devices, email and collaboration.

CIS & NIST aligned

Baselines built on recognised security standards.

Identity (Entra ID)

Secure sign-in, MFA and conditional access.

Devices (Intune)

Managed, compliant devices across your estate.

Email & collaboration

Harden Exchange, Teams, SharePoint and OneDrive.

Continuous maintenance

Kept current as Microsoft changes the platform.

Drift monitoring

Alerted when settings move away from best practice.

Learn more →
20
years supporting GM business
130+
organisations supported
24/7
monitoring & response
CE+
Cyber Essentials Plus certified
“They feel like our own IT department — quick to respond, and always a step ahead of problems.”
— Illustrative testimonial placeholder
Property Alliance GroupRussell WBHOMoya ColeDr Kershaw’s HospiceKingfisher Learning Trust

Pricing

Simple managed pricing

Best-practice baselines, maintained for you.

Microsoft 365 Security Baselines

From £125 / month
Get a tailored quote

FAQs

Your questions, answered

What is a Microsoft 365 security baseline?
A security baseline is a set of best-practice configuration policies applied across your Microsoft 365 tenant — covering identity, devices, email and collaboration — so your environment is hardened against common attacks in a consistent, documented way.
Isn’t Microsoft 365 secure by default?
Not fully. Microsoft 365 ships configured for easy access and productivity, with many protective settings switched off or set permissively. Achieving a genuinely secure tenant takes deliberate hardening — and keeping it there as Microsoft changes things.
What is Inforcer?
Inforcer is the specialist platform we use to deploy and maintain Microsoft 365 security baselines. Its expert-curated baselines are informed by CIS, NIST and Microsoft guidance, and are kept up to date as Microsoft evolves the platform — giving us a trusted, low-risk foundation to build your security on.
What does the baseline cover?
Identity and access (Entra ID), device management (Intune), threat protection (Microsoft Defender), email (Exchange Online), and collaboration and data (Teams, SharePoint, OneDrive and Purview) — the whole Microsoft 365 estate.
What is ‘configuration drift’?
Drift is when a tenant’s settings gradually move away from best practice — through manual changes, new features, or Microsoft updates. We continuously monitor for drift and put settings back to your agreed baseline, so security doesn’t quietly degrade over time.
Does this help with Cyber Essentials?
Yes. Many Cyber Essentials controls map directly to Microsoft 365 configuration — MFA, access control, secure defaults and device settings — so a good baseline makes certification far easier to achieve and maintain.
Will it disrupt our users?
No — we roll baselines out in a planned, phased way and test as we go. Most changes are invisible to users; where a change affects how people work (such as MFA), we communicate it clearly in advance.
What Microsoft 365 licences do we need?
Baselines work across common plans such as Microsoft 365 Business Premium, and we tailor what we deploy to the licences you hold so you get the most from what you’re already paying for.
How is it priced?
As a managed service from £125 per month, or included as part of our Advanced Cyber Security plan. Final pricing depends on your licences and number of users — ask us for a tailored quote.
Can you tailor the baseline to us?
Yes. The shared best-practice baseline is the foundation; where you have specific needs we layer tailored (custom) policies on top, so you get both a proven standard and the flexibility your organisation requires.

Let’s lock down your Microsoft 365

Talk to a Greater Manchester team that has looked after growing organisations for 20 years.

Get a quoteBook a call