Microsoft 365 Security
Secure the Place Your Business Works
Microsoft 365 holds your email, files and identities. Pulsar IT configures multi-factor authentication, Conditional Access, anti-phishing and secure sharing across your whole tenant, then reviews it regularly so it stays that way.
What is Microsoft 365 Security?
Microsoft secures the platform, but how your tenant is configured is your responsibility. Many security features are switched off, left at permissive defaults or only available on certain licences. Microsoft 365 Security is our tenant-wide security configuration: the settings that protect sign-ins, admin accounts, email, shared files and devices across your organisation.
We configure multi-factor authentication (MFA), Conditional Access where your licences support it, anti-phishing protection and secure sharing policies, then review them regularly against our baseline. It is the security side of our Microsoft 365 management service, and is included at no extra charge with every Pulsar IT support plan.
This is an ongoing service rather than a one-off check. If you would like an independent review of your current settings first, see our Microsoft 365 Security Assessment.
Key benefits
- MFA enforced for every user, with stronger protection for admin accounts
- Sign-in policies matched to your licences, including Conditional Access on Business Premium
- Email protection against phishing, impersonation and malicious attachments
- Sharing settings that keep files inside the business unless there is a reason to share
- Regular reviews so settings don't drift over time
How does it work?
We start with what your licences include, because Microsoft 365 security controls vary by plan. We then apply our baseline across your tenant and keep it under regular review.
Review licences and current settings
We check which Microsoft 365 plans you have, how sign-in, email and sharing are configured today, and which devices and apps your team uses.
Apply the baseline
We configure MFA, block legacy sign-in methods where possible, protect admin accounts, set anti-phishing and sharing policies, and apply Conditional Access and device policies where your licences include them. Changes that affect staff are planned and communicated first.
Review and maintain
We review the configuration regularly against the baseline and adjust settings as your business, your licences and Microsoft's features change.
- User signs inPassword on any device
- Multi-factor authenticationAuthenticator app or passkey
- Conditional AccessDevice and sign-in conditions, where licensed
- Email, files and TeamsAccess granted under your policies
Security baseline
- MFA for all users, preferring the Microsoft Authenticator app or passkeys over text messages
- Blocking of legacy (basic) authentication, with a plan for printers, scanners and apps that send email using SMTP AUTH
- Separate admin accounts, a small number of Global Administrators and emergency access accounts
- Conditional Access policies, where Microsoft Entra ID P1 is licensed
- Anti-phishing, anti-spam and anti-malware policies in Exchange Online Protection
- Impersonation protection, Safe Links and Safe Attachments, where Defender for Office 365 Plan 1 is licensed
- Automatic forwarding to external addresses kept blocked, with exceptions only where there is a business need
- SharePoint, OneDrive and Teams sharing defaults, expiry on any anonymous links and guest access settings
- Device and app protection policies through Microsoft Intune, where licensed
- Audit logging confirmed as switched on
Where it helps
A phished password
A member of staff enters their password on a fake login page. With MFA in place, the password alone is not enough to sign in.
A hidden forwarding rule
After a compromise, attackers often add a rule that quietly forwards mail outside the business. With external forwarding blocked, those messages stay inside.
A file shared too widely
Default sharing to people in your organisation, and expiry dates on anonymous links, limit how far a shared file can travel.
Which controls depend on which licence?
Microsoft 365 licences are not included in Pulsar IT's price, and what we can configure depends on the plans you hold. We configure each control for the users whose licences include it and tell you where gaps remain.
Business Basic and Business Standard
Include Microsoft Entra ID Free, with security defaults that turn MFA on and protect admin sign-ins, built-in mailbox protection from Exchange Online Protection, and Basic Mobility and Security for simple device management.
Business Premium
Adds Microsoft Entra ID P1 for Conditional Access, Defender for Office 365 Plan 1 for impersonation protection, Safe Links and Safe Attachments (including files in SharePoint, OneDrive and Teams), Microsoft Intune Plan 1 for device management and Microsoft Defender for Business for device protection.
Mixed licences
Many businesses have a mix of plans. We explain which users are covered by which controls, so you can decide whether an upgrade is worthwhile.
If you use Enterprise plans, we confirm which features apply to your tenant during the initial review.
Problems solved
Stolen passwords
Phishing pages and reused passwords give attackers a way in. MFA means a password on its own is not enough.
Admin accounts used for everyday work
An admin account that reads email is an easy target. Separate admin accounts with strong MFA reduce that risk.
Paying for features that aren't switched on
Business Premium includes Conditional Access, Intune and Defender for Office 365 Plan 1, but they need configuring to help.
Files shared with 'anyone' links
Links that work for anyone can be forwarded indefinitely. Sensible sharing defaults keep control with the business.
Old devices relying on legacy sign-in
Older protocols bypass MFA. We find what still depends on them and move it to a supported method.
What's included
Included as standard
- Review of your Microsoft 365 licences and current security settings
- MFA configured for all users, with admin accounts protected
- Conditional Access policies, where your licences include them
- Anti-phishing and email protection policies using the features in your licences
- Secure sharing settings for SharePoint, OneDrive and Teams
- Regular configuration reviews against our baseline
Optional or scoped
Available on request and confirmed in your proposal; not part of the standard service.
- An independent Microsoft 365 Security Assessment of your tenant
- Additional filtering through our Email Security & Filtering service
- Microsoft 365 Backup of email, OneDrive, SharePoint and Teams
- Device enrolment projects with Microsoft Intune, where licensed
What's not included
- Microsoft 365 licences and subscriptions, which are billed separately
- Controls your licences do not include; we will tell you where an upgrade would be needed
- Backup of Microsoft 365 data, which is a separate service
- Day-to-day user and mailbox administration when this service is bought on its own; see Microsoft 365 Management & Cloud Services
- 24/7 Microsoft 365 identity threat monitoring, a separate Pulsar IT Managed SOC subscription
Good configuration greatly reduces risk but cannot stop every attack. Some phishing messages will still reach inboxes, which is why staff training matters too.
Some changes, such as enforcing MFA or blocking legacy sign-in, can affect older devices and apps. We identify these first and agree a plan so business systems keep working.
Who it's suitable for
- Businesses using Microsoft 365 for email, files and Teams
- Organisations preparing for Cyber Essentials, which requires MFA on cloud services
- Businesses on Business Premium that want its security features properly configured
- Teams with remote staff or personal phones accessing work email
Pricing
Microsoft 365 Security is delivered as part of our Microsoft 365 Management & Security Baseline, which every Pulsar IT support plan includes. If you need it on its own, we confirm the price after reviewing your tenant. Microsoft 365 licences are not included in our price.
Use the quote builder to add Microsoft 365 Security to an indicative quote, or book a free security review and we'll recommend what fits.
Price
On Application
Included at no extra charge with Microsoft 365 Management & Security Baseline (£125 per organisation per month).
What affects the price
- Your Microsoft 365 licences and the security features they include
- Number of users and admin accounts
- Number of devices to bring under management
- Whether you have a Pulsar IT support plan
- Existing configuration and any clean-up needed
All prices exclude VAT.
Add to Your QuoteFrequently asked questions
Is this included in our support plan?
Yes. Every Pulsar IT support plan includes our Microsoft 365 Management & Security Baseline, which covers this security configuration and is charged once per organisation rather than per user. If you only need Microsoft 365 security without a support plan, it is priced on application.
Do we need Business Premium?
Not necessarily. Business Basic and Standard include security defaults and Exchange Online Protection, which cover the essentials. Business Premium adds Conditional Access, Defender for Office 365 Plan 1, Intune and Defender for Business, which many small businesses find worth the upgrade. We explain the trade-offs for your situation.
How is this different from the Microsoft 365 Security Assessment?
The assessment is a one-off review that gives you a prioritised report and makes no changes. This service is ongoing: we configure the settings and keep reviewing them.
Will MFA be a hassle for staff?
Each person completes a short setup, usually with the Microsoft Authenticator app. How often people are prompted afterwards depends on your configuration and licences. We help staff through enrolment and plan the switch-over so nobody is locked out.
What about our scan-to-email printer?
Devices and apps that send email using SMTP AUTH often rely on legacy sign-in. Microsoft has announced that Basic authentication for SMTP AUTH will be disabled by default for existing tenants at the end of December 2026, so we list these devices and help move them to a supported method.
Let's Secure Your Business
Find out how Pulsar IT can help protect, manage and improve your IT environment.