RISKSIGHT M365 EDITION
Six workloads, measured against the baseline the US federal government mandates.
Aligned to CISA SCuBA and BOD 25-01. Evaluated using automated metadata inspection combined with analyst validation.
Request M365 AssessmentWORKLOAD SCOPE
What it assesses across your tenant
| Workload | Focus |
|---|---|
| Microsoft Entra ID | Conditional Access, legacy authentication blocking, risk-based policies, MFA and strong authentication, privileged access, app registration and consent, guest access, centralised logging |
| Microsoft 365 Defender | Preset security policies, anti-phishing, safe attachments and safe links, impersonation protection, alerting, audit logging |
| Exchange Online | External-sender warnings, auto-forwarding controls, mailbox auditing, connection filtering, DLP, transport security |
| SharePoint & OneDrive | External sharing scope, default sharing-link behaviour, custom-script controls |
| Microsoft Teams | External access, meeting and messaging policies, email integration, app permissions |
| Power Platform | Environment-creation restrictions, DLP policies, tenant isolation, Power Apps CSP, Power Pages creation, sharing controls |
Also reported: SPF, DKIM and DMARC validated per domain — a common, high-impact gap. Plus a licence inventory showing assigned versus available Microsoft licences, which is where the licence-gap conversation starts.
VALIDATION PACKS & SCOPE
Validation Packs & Workload Scope
ScubaGear marks some controls as manual — tooling can’t confirm them. An analyst validates those. Workload validation options:
| Option | Validation Scope |
|---|---|
| Baseline | Automated assessment only |
| Baseline +1 | One targeted workload pack |
| Baseline +2 | Any two workload packs |
| Baseline — all packs | Every workload pack validated by a senior security analyst |
Annualised options: START (quarterly automated report) · CORE (quarterly report plus 2 validation packs/year) · STRATEGIC (quarterly report, all packs, executive interpretation).