The five controls
Firewalls, secure configuration, user access control, malware protection and security update management, requirement by requirement.
Cyber Essentials
Cyber Essentials evidence from Microsoft 365, for every client.
See which Cyber Essentials requirements each tenant already meets, the evidence for each, and what to fix before the assessment.
What you get
Evidence, not opinion
Each requirement Microsoft 365 can show is answered from the tenant, with the setting behind it.
Your answers too
Record answers for what Microsoft 365 cannot show, such as boundary firewalls, so the picture is complete.
Cyber Essentials Plus
Readiness for the Plus technical audit is mapped too.
How it works
- 01
Assess
Run the assessment; readiness is worked out from it.
- 02
Close the gaps
Fix what fails, and record answers for the rest.
- 03
Apply
Take the evidence into the self-assessment with your certification body.
What it can’t see
Said plainly, so you know what you are buying.
- ConfigCheckup is not a certification body and does not award Cyber Essentials.
- Some requirements (boundary firewalls, devices outside Intune, software on servers) cannot be seen from Microsoft 365 and need your answer.
Permissions it uses
Microsoft Graph permissions, granted by the client’s admin.
Policy.Read.AllDeviceManagementManagedDevices.Read.AllDeviceManagementConfiguration.Read.AllRoleManagement.Read.Directory
Questions
- Will this get my client certified?
- It shows how ready they are and gives you the evidence. Certification is done by an IASME certification body.
- Is there a free version?
- Yes. The free Cyber Essentials checklist on this site walks through the requirements without connecting a tenant.
See it on your own tenant.
Fourteen days, one tenant, no card. The figures come from your tenant, not from averages.