13/08/2026
Do you have a simple way to review your Microsoft 365 setup?
Microsoft 365 often starts with email and a few accounts.
Over time, it can become much more than that.
Files may move into OneDrive and SharePoint. New people join. Others leave. Devices are added. Applications are given access. Suppliers or guests may be invited in. Security settings and licences can change too.
So it is useful to review the wider setup from time to time, rather than only checking whether email and Microsoft 365 apps are working.
Some of the areas worth looking at include:
• Who has administrator access?
• Are everyday accounts separate from administrator accounts?
• Is multi-factor authentication configured appropriately?
• Which applications have permission to access company information?
• Are business devices being managed and reviewed?
• Is important Microsoft 365 data backed up independently?
• Is useful auditing and monitoring in place?
• Does existing access still have a current business reason?
Not every small organisation needs exactly the same configuration.
The aim is to understand what is in place, what still has a purpose and what may need to be reviewed.
We have put together a practical guide covering the main areas to consider when reviewing a Microsoft 365 setup for a small business:
https://itsupportforsmallbusinessesinlondon.net/microsoft-365-security-setup-small-business/