Quick Security Self-Assessment | TenantScan by Lowery Solutions

Question 1 of 6

When someone at your firm logs into Microsoft 365, do they have to verify their identity a second way, for example through a phone app or a text message code?

This is sometimes called "two-factor" or "two-step" verification.

Question 2 of 6

If someone tried to sign into a Microsoft 365 account at your firm from another country right now, would anything automatically block or flag it?

Some organizations have policies that restrict logins to certain locations or flag unusual sign-in attempts.

Question 3 of 6

Has anyone at your firm ever received an email that appeared to come from your own firm's email address, but was not actually sent by anyone you recognize?

This is called email spoofing. Attackers use it to impersonate firms when contacting clients.

Question 4 of 6

When someone leaves your firm, how quickly is their Microsoft 365 account removed or disabled?

Former employees' accounts that stay active are one of the most common ways unauthorized access happens.

Question 5 of 6

Who manages and configures your Microsoft 365 environment day to day?

Microsoft 365 is not secure by default. The security settings require active configuration.

Question 6 of 6

Is your firm thinking about using Microsoft 365 Copilot AI tools in the next year?

Copilot can read everything a user has access to. Security hygiene matters before turning it on.

Your Preliminary Assessment

Loading your results…

Run the Full Automated Audit (Free) Schedule a Free 30-Minute Consultation Instead

or

Send me these results and have someone reach out

✓ Got it. Someone from Lowery Solutions will be in touch shortly.