Safeguards
Securing Microsoft 365
How do I secure Microsoft 365?
For many businesses Microsoft 365 is the most important gateway to email and files. Whoever takes over that account reads along, writes in your name and reaches your documents. Securing it therefore starts with the accounts.
The first step is two factor authentication for every account, without exception. Management accounts in particular are often exempted because it is inconvenient. Those are precisely the accounts being targeted.
The second step concerns administrator rights. An account used to read email every day should not carry administrator rights. Separate the administrative account from the working account.
The third step is traceability. Switch on logging and check whether forwarding rules have been set up in the mailbox. An inconspicuous rule that copies incoming invoices to an outside address is a common way to redirect payments.
All terms in the knowledge base
Legal notice: We are engineers, not lawyers: we cannot and will not make any statements on legal questions. This entry is purely technical, reflects the state of knowledge to the best of our understanding, and is not legal advice; it does not replace review by a qualified lawyer. No guarantee is given as to correctness or completeness; liability arising from the use of this information is excluded to the extent permitted by law. What counts is always the version currently in force at the responsible body, for example dsb.gv.at, nis.gv.at or enisa.europa.eu. AI transparency: parts of this entry may have been created with AI assistance, so errors are possible despite review: please report errors here · how we create content.
From the term to practice
Where does your business actually stand?
The IT Check reviews your IT across 8 audit areas with more than 100 individual checks and delivers documented findings with a prioritised action plan. From 1,299 € excl. VAT.
office [at] vetosec [dot] at · vetosec.at/contact/
