Microsoft
Most attacks start with a stolen login. Microsoft helps you make sure only the right people get in.
What they do
Microsoft gives you identity, access and device protection through Entra ID for sign-in and multi-factor authentication, Defender for Business for endpoint protection, and Intune for managing and securing devices. Together they control who gets access to what, and protect the devices they use.
How we use it for you
We set up multi-factor authentication, conditional access and least-privilege accounts in Entra ID, switch on Defender across your devices, and use Intune to enforce secure settings. We tune it to your business so it is strong without getting in the way.
What you see
Sign-in protection, MFA coverage, device protection and secure-score data flow into your Security Command Centre, and feed directly into your SMB1001 and ISO 27001 evidence.
What it means for you
Only the right people get in, and you can show how access is controlled.
Standards and requirements it supports
SMB1001:2026
- 2.2.0.0Accounts without admin privileges
- 2.3.0.0Individual user accounts
- 2.5.0.0MFA on email
- 2.6.0.0MFA on all business apps
- 2.9.0.0MFA where important data is stored
- 1.12.0.0Endpoint Detection and Response (via Defender)
- 1.4.0.0Auto-install software updates and patches (via Intune)
ISO 27001:2022
- 5.15Access control
- 5.16Identity management
- 5.17Authentication information
- 5.18Access rights
- 8.5Secure authentication
- 8.7Protection against malware
See where Microsoft fits for your business
The free readiness assessment shows where you stand and what to fix first, and whether this is one of the tools you need.