Free Assessment

A maturity journey, not a feature list

Every plan collects evidence and tracks corrective actions. The difference is how far you go — from baseline protection to full ISO 27001 certification.

Plan 1 Foundation

Secure your front door

Typical delivery: 2-4 weeks

Protection against the most common attack vectors. Email authentication, CIS baselines, and identity controls that stop the majority of threats.

  • 22 capabilities configured and validated
  • 41 Conditional Access policies deployed
  • CIS M365 Foundations benchmarks
  • Email authentication (SPF, DKIM, DMARC)
  • Anti-phishing and safe links
✓ Evidence collected · Corrective actions tracked
Security baseline CIS benchmarks · Email authentication · Access control
Secure my environment
Plan 2 Endpoint Most popular

Control your estate

Typical delivery: 4-6 weeks

Every device managed, every identity protected. Defender for Endpoint, Intune compliance, privileged access, and threat detection via Sentinel.

  • 46 capabilities (Foundation + 24)
  • 1,000+ device configuration policies
  • 1,298 application packages managed
  • Defender for Endpoint & Identity
  • Privileged Identity Management
✓ Evidence collected · Corrective actions tracked
ISO 27001 gap analysis Preparing for compliance · Gaps identified · Roadmap provided
Take control
Plan 3 Information Governance

Get Copilot ready

Typical delivery: 6-8 weeks

Full ISO 27001 ISMS, data classification, DLP, and AI governance. Your data needs to be classified, labelled, and governed before Copilot touches it. Plan 3 gets you there.

  • 78 capabilities (all)
  • 115 evidence reports generated
  • Data Loss Prevention + sensitivity labels
  • Microsoft Copilot readiness
  • Secure Score 75+ achieved
✓ Evidence collected · Corrective actions tracked
Full ISO 27001 ISMS Policies · SoA · Risk register · Management review · Audit preparation
Get certified

Evidence from day one

Every plan — not just Plan 3 — collects compliance evidence and opens corrective actions when issues are found. When you're ready to pursue ISO 27001, the evidence trail is already there. Your history becomes your certification accelerator.

Automated collection

Evidence gathered directly from your M365 tenant — no manual screenshots or spreadsheets.

Corrective actions

Non-compliant findings automatically generate tickets with remediation guidance.

Audit-ready reports

When you reach Plan 3, your evidence history feeds directly into auditor-grade reports.

Secure Secure Services

Email Security

SPF, DKIM, DMARC, anti-phishing, and safe attachments for Microsoft 365 email.

View capabilities →

Identity & Access Management

Conditional Access, MFA, Privileged Identity Management, and passwordless authentication.

View capabilities →

Endpoint Security

Microsoft Defender for Endpoint, Intune compliance, attack surface reduction, and device management.

View capabilities →

Threat Detection & Response

Microsoft Sentinel SIEM, Defender for Identity, incident response, and advanced threat analytics.

View capabilities →

Comply Comply Services

Data Protection & Governance

Data Loss Prevention, sensitivity labels, information protection, and retention policies.

View capabilities →

Compliance Benchmarks

CIS Microsoft 365 benchmarks, security baselines, and compliance scoring.

View capabilities →

Backup & Disaster Recovery

Microsoft 365 backup, business continuity planning, and disaster recovery validation.

View capabilities →

Succeed Succeed Services

Cloud & AI Security

Cloud app security, AI governance, Microsoft Defender for Cloud Apps, and lifecycle workflows.

View capabilities →

Not sure which plan you need?

Our free assessment maps your current M365 configuration to the capabilities you already have — and shows you exactly where you sit on the maturity journey.

Start Free Assessment