Robust security and compliance for Microsoft 365<\/h1><\/div>![](\"https:\/\/voss-media.imgix.net\/2023\/01\/Tim-Jalland-Colour-White-border.png?auto=compress%2Cformat&fit=scale&h=768&ixlib=php-3.3.1&w=768&wpsize=medium_large\" "\\"Tim-Jalland-Colour-White-border\\"")
<\/span><\/div><\/div><\/div>Author: Tim Jalland
\nSolution Manager, VOSS Solutions<\/h6>\n
Tuesday August 05, 2025<\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div>
There’s an interesting article on UC Today, around the recent work at Microsoft to restrict elevated permissions, as used by applications, in the M365 ecosystem. It finds that many breaches are through access to login credentials tied to elevated or global administrator rights.<\/p>\n
\n- Microsoft Security Enhancements for 365 Platform – UC Today<\/a><\/li>\n<\/ul>\n<\/div>
It asks the question – do you know how many people on your Microsoft 365 service are configured at this level, and if so, do they really need that level of access. As Microsoft points out: IT leaders must actively adapt their environments by auditing permissions, updating authentication methods, and continuously monitoring access.<\/p>\n<\/div>
I\u2019ve extracted the key points made by Kevin Kieller from enableUC, in his recent eBook The IT Pro\u2019s Ultimate Microsoft 365 Management Checklist<\/em> <\/strong><\/a>that are relevant here.<\/p>\n<\/div><\/div><\/div>\n- Do you regularly review and optimize your automation workflows to ensure they remain efficient and effective? Are you confident in your ability to protect sensitive data within your Microsoft 365 tenant from both internal and external threats?<\/li>\n
- Do you have robust security controls in place, such as multi-factor authentication (MFA), conditional access policies, and data loss prevention (DLP) rules, to prevent unauthorized access and configuration changes?<\/li>\n
- Are you meeting all relevant compliance requirements for data privacy and security (e.g., GDPR, HIPAA, SOC 2) applicable to your industry and region?<\/li>\n<\/ul>\n<\/div><\/div><\/div>
\n- Can you easily audit user activity, track changes made within your environment, and generate reports for compliance purposes?<\/li>\n
- Do you have a comprehensive strategy for managing and responding to security incidents within your Microsoft 365 environment?<\/li>\n
- Are you regularly reviewing and updating your security policies and configurations to address evolving threats and best practices?<\/li>\n<\/ul>\n<\/div><\/div><\/div>
At VOSS<\/span> we can help answer these questions and have<\/span> made <\/span>security <\/span>an integral part of lifecycle service management <\/span>within <\/span>our<\/span> VOSS<\/span> for Microsoft solutions<\/span>.\u00a0 <\/span>Y<\/span>ou can read <\/span><\/span>more <\/span>detail<\/span> here<\/span>,<\/span><\/span><\/span><\/a> or for<\/span> more<\/span> information<\/span> on VOSS, <\/span>p<\/span>l<\/span>e<\/span>a<\/span>s<\/span>e<\/span> d<\/span>o<\/span> <\/span>get<\/span> in touch<\/span><\/span><\/span><\/a>.<\/span><\/span>\u00a0<\/span><\/p>\nRead more about Microsoft 365 management, in the eBook from Kevin <\/span>Kieller<\/span>:<\/span><\/span>\u00a0<\/span><\/p>\n<\/div><\/div><\/div>EnableUC Microsoft 365 management checklist - VOSS<\/a>
<\/span><\/div><\/div><\/div>Author: Tim Jalland
\nSolution Manager, VOSS Solutions<\/h6>\n
Tuesday August 05, 2025<\/p>\n<\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div>
There’s an interesting article on UC Today, around the recent work at Microsoft to restrict elevated permissions, as used by applications, in the M365 ecosystem. It finds that many breaches are through access to login credentials tied to elevated or global administrator rights.<\/p>\n
- \n
- Microsoft Security Enhancements for 365 Platform – UC Today<\/a><\/li>\n<\/ul>\n<\/div>
It asks the question – do you know how many people on your Microsoft 365 service are configured at this level, and if so, do they really need that level of access. As Microsoft points out: IT leaders must actively adapt their environments by auditing permissions, updating authentication methods, and continuously monitoring access.<\/p>\n<\/div>
I\u2019ve extracted the key points made by Kevin Kieller from enableUC, in his recent eBook The IT Pro\u2019s Ultimate Microsoft 365 Management Checklist<\/em> <\/strong><\/a>that are relevant here.<\/p>\n<\/div><\/div><\/div>
- \n
- Do you regularly review and optimize your automation workflows to ensure they remain efficient and effective? Are you confident in your ability to protect sensitive data within your Microsoft 365 tenant from both internal and external threats?<\/li>\n
- Do you have robust security controls in place, such as multi-factor authentication (MFA), conditional access policies, and data loss prevention (DLP) rules, to prevent unauthorized access and configuration changes?<\/li>\n
- Are you meeting all relevant compliance requirements for data privacy and security (e.g., GDPR, HIPAA, SOC 2) applicable to your industry and region?<\/li>\n<\/ul>\n<\/div><\/div><\/div>
- \n
- Can you easily audit user activity, track changes made within your environment, and generate reports for compliance purposes?<\/li>\n
- Do you have a comprehensive strategy for managing and responding to security incidents within your Microsoft 365 environment?<\/li>\n
- Are you regularly reviewing and updating your security policies and configurations to address evolving threats and best practices?<\/li>\n<\/ul>\n<\/div><\/div><\/div>
At VOSS<\/span> we can help answer these questions and have<\/span> made <\/span>security <\/span>an integral part of lifecycle service management <\/span>within <\/span>our<\/span> VOSS<\/span> for Microsoft solutions<\/span>.\u00a0 <\/span>Y<\/span>ou can read <\/span><\/span>more <\/span>detail<\/span> here<\/span>,<\/span><\/span><\/span><\/a> or for<\/span> more<\/span> information<\/span> on VOSS, <\/span>p<\/span>l<\/span>e<\/span>a<\/span>s<\/span>e<\/span> d<\/span>o<\/span> <\/span>get<\/span> in touch<\/span><\/span><\/span><\/a>.<\/span><\/span>\u00a0<\/span><\/p>\n
Read more about Microsoft 365 management, in the eBook from Kevin <\/span>Kieller<\/span>:<\/span><\/span>\u00a0<\/span><\/p>\n<\/div>
<\/div><\/div>EnableUC Microsoft 365 management checklist - VOSS<\/a>