3-Week Security Baseline Assessment

Avertium’s strategic advisory services will help assess risk posture, compliance status, and implementation of security best practices in virtually any industry security framework.

By accurately assessing and identifying any vulnerabilities or gaps in coverage, you can measurably improve your security maturity, increase efficiencies and productivity, and extend your overall use of Azure and Microsoft 365 suite.

• Identify Security Gaps

Get a comprehensive security and compliance gap analysis of your Microsoft 365 and Azure configurations and settings.

• Roadmap to Security and Compliance

The remediation and optimization recommendations that the gap analysis produces are used to construct a comprehensive security and compliance roadmap. The roadmap is complete with recommendations customized to your security and compliance objectives.

• Maximize your ROI

It is important to get the most out of your technology spend. If not properly configured and tuned to your environment, the power of the Microsoft security tools will not be fully utilized. The gap analysis and roadmap deliverables will allow you to better leverage the capabilities of your licensed Microsoft tools and technology.

Avertium will conduct an Azure security baseline assessment which will consist of the following:

• Discovery



Perform a comprehensive examination of your Azure deployment and configuration. This includes but is not limited to:

• Identity and access management
• Conditional access
• Logging and analytics
• Tenant security controls
• Application security controls
• Data security controls
• Endpoint security controls
• Analysis



Avertium will document discovery results and assess those results against multiple security frameworks and industry best practices to identify gaps in coverage and establish remediation recommendations.



• Use case development
• Staff Interviews
• Gap analysis based on security frameworks and industry best practices



Avertium will also evaluate your goals that involve data migration from other tools, goals, and expectations for using the tools, and how Microsoft solutions will be leveraged by your business. Avertium will identify any redundancies in tools that can be eliminated by leveraging the most out of your Microsoft investment.



• Capabilities


• Security and compliance frameworks (NIST, CIS, PCI, HIPAA, etc.) and MITRE ATT&CK-based security architecture.
• Comprehensive gap analysis of the Microsoft 365 suite such as Microsoft Teams, Exchange, SharePoint, OneDrive, and Microsoft Intune.
• Security maturity evaluation related to data and network security, boundary defenses, encryption, operational practices, identity & access management, and other related features and functions.
• Accurate and detailed technical and strategic view of the security controls that compromise the hybrid infrastructure.
• Secure baseline deployment for Microsoft 365.
• Security controls align with enterprise policies and usage guidelines.

Avertium will deliver a comprehensive report of findings and remediation guidance including:

• Executive Summary
• Detailed list of findings by criticality
• Remediation Recommendations
• Remediation Implementation Plans

Additionally, the results of this engagement will empower the organization to immediately begin remediation and optimization work to reduce the risk of unintended security incidents and/or sensitive data exposure.