Self-assessment
Does your tenant still depend on one person’s memory?
Six practical signals reveal responsibilities without an owner, cadence, or record-without inventing a maturity score.
Answer according to what the team can explain today. The resulting list stays in your browser and can prepare an internal discussion or initial scoping conversation.Answer yes, no, or unsure - no score is calculated.
Accountability
Can someone explain who decides on M365 changes and who verifies the result?
- An owner and backup are known
- Sensitive decisions have an approval path
- One departure would not erase all tenant memory
Access and guests
Do you know why guests, groups, and privileged accounts still exist?
- Guests have a reason and owner
- Administrative roles are justified
- Inactive accounts trigger a decision
Licences and lifecycle
Do joiners, role changes, and leavers follow a checklist that handles additions, removals, and responsibility transfers?
Data and Copilot
Before buying or enabling Copilot, does the team understand broadly shared spaces, guests, and data ownership?
No-collection planner
Prepare your next tenant review.
Select only the situations that resemble yours. Nothing is sent or retained. You can copy the list before reviewing the available contact options.
Several uncertain answers do not automatically mean “audit.”
A limited starting state and management cadence may be enough. A deep security anomaly, migration, or redesign needs separate scope.