This scorecard is based on the type of checks I use when reviewing Microsoft 365 tenants in real environments. It is not a replacement for Microsoft Secure Score. Secure Score measures what can be detected automatically. This assessment looks at operational practices, design decisions, and governance gaps that often require human review. Score your tenant across four pillars and use the result to decide what to improve first.

Bring enterprise-grade security to your small business with Microsoft 365 Business Premium. Discover the new Defender and Purview add-ons that deliver enterprise protection and compliance for just $15 per user — making cybersecurity accessible to everyone.