What Microsoft Secure Score is
The Secure Score improvement actions each check corresponds to, so Microsoft’s view and this report can be read side by side.
Who asks for it: Anyone comparing against Microsoft’s own recommendations.
What Microsoft 365 can show
16 items evidenced by 12 checks. A check maps to a item only where its result is genuine evidence for it, so a item is listed only when a tenant setting can show it.
Outside Microsoft 365
Secure Score has actions for products the tenant may not license; this report lists only those a check covers.
Readiness is not certification or an audit opinion: it covers only what Microsoft 365 can evidence, and the report says so.
Every item and the checks behind it
The mappings were last checked against the published standards in October 2026. Each check links to what it looks at and how to fix it.
| Item | Checks that evidence it |
|---|---|
| Anti-phishing policies | |
| Designate more than one global admin | |
| Do not allow users to grant consent to unreliable applications | |
| Enable Conditional Access policies to block legacy authentication | |
| Enable self-service password reset | |
| Ensure all users can complete multifactor authentication | |
| Ensure mailbox auditing is on | |
| Overall score | |
| Require multifactor authentication for administrative roles | |
| Safe Attachments | |
| Safe Links | |
| Set the password expiration policy to never expire | |
| Turn on audit log search | |
| Turn on sign-in risk policy | |
| Turn on user risk policy | |
| Use least privileged administrative roles |
Related frameworks
- Microsoft Cloud Security Benchmark: Microsoft’s own baseline for securing its cloud services.
- Zero Trust: Microsoft’s Zero Trust deployment pillars, from identities to data.
- PCI DSS 4.0.1: The card industry’s data security standard.
- ISO/IEC 27001:2022: The international standard for an information security management system.