I will secure your microsoft 365 tenant with mfa and conditional access
HIPAA and Cybersecurity Advisor for Small Practices
About this Gig
Most small business breaches start in Microsoft 365: a stolen password, no MFA, a phishing email, or an old admin account nobody turned off. Cyber insurers now ask about every one of these.
I'm an IT Director with 20+ years running technology and security, including Microsoft 365, Entra ID, Conditional Access, Defender and Purview for hospitals and clinics.
What I check and fix:
- MFA for every user, including admins
- Conditional Access and legacy sign-in blocking
- Email protection: anti-phishing, SPF, DKIM, DMARC
- Admin roles and stale accounts
- Sharing, retention and data loss prevention settings
- Secure Score quick wins
You get a written report with what I found, what I changed, and what to do next.
Great for medical and dental practices, law and accounting firms, and any small business on Microsoft 365. Please message me before ordering with your number of users and your license type (Business Basic, Standard or Premium).
Device:
Desktop
•
Laptop
•
Mobile
Operating system:
Windows
•
IOS
•
OSX
FAQ
How do you access my tenant?
For the audit, we screen-share or you grant a temporary read-only role (Global Reader). For hardening, a temporary admin account that you disable when we finish. Never share your own password.
Will this lock my staff out?
No. Changes are planned with you first, MFA is rolled out with clear instructions for staff, and we keep a break-glass admin account so nobody gets locked out.

