15 Microsoft 365 Controls Your Cyber Insurer Asks About
Free. One printable page: the Microsoft 365 controls that cyber insurance questionnaires keep coming back to, and how to check each one in your own tenant before you sign.
By GablePath Digital — Mark Restivo's Microsoft 365 security practice.
What you get
- MFA for every user, for remote access and for every admin account — and how to tell "most people" from "everyone".
- Legacy authentication, admin role sprawl and emergency-access accounts.
- SPF, DKIM and DMARC, external forwarding, and the audit log.
- Endpoint detection, backups you control, and a tested incident response plan.
Download the free checklist (PDF)
No email address or signup required. Not legal advice; insurers' questions vary, so confirm with your broker.
Then what?
If the checklist turns up gaps, the Microsoft 365 Security Baseline Kit is the long version: all 39 controls with how to set and verify each one, a register mapped to 14 insurance themes, policy templates and a read-only audit script. Or have GablePath do it for you with the 10-Day M365 Control Sprint.