Cloud Security Check

Cyberattacks cause EUR 200 billion of damage

The German economy loses more than 200 billion euros a year just to cyber crime, according to Bitkom (digital organization in Germany).
84 percent of German companies were affected last year. Attacks from Russia and China have increased dramatically recently.

A study by the security software company McAfee from December 2020 shows that the world economy loses more than one trillion US dollars each year due to cyber crime, which corresponds to around one percent of global gross domestic product (GDP). In the last two years alone, there has been an increase of more than 50 percent.

Business email fraud continues to rise

According to Microsoft, attackers are conducting more email attacks than ever before - in 2022, the number of phishing attacks increased by 61% compared to 2021. Microsoft Threat Intelligence detected and examined 35 million business email compromise (BEC) attempts, with an average of 156,000 attempts daily between April 2022 and April 2023.

Threat actors specializing in business email are using increasingly sophisticated tactics including the use of IP addresses of private individuals, to make attack campaigns appear local.

Email send and receive security

Checked are the settings that are necessary for successfully sending your emails, even to environments with strict email protection.
This includes checking and recommending action for:

• SPF settings in domain DNS and M365 tenant
  
• DKIM settings M365 tenant and domain DNS
  
• DMARC settings in domain DNS
  

Checked are the settings that provide for Email protection on receipt.
This includes checking and recommending action for:

• Anti-phishing, anti-spam and anti-malware policies
  
• Safe attachments and safe links policies
  
• Quarantine policies for users and admins
  
• Automatic forwarding of emails
  

Identity Protection

Settings in AD and Azure AD are checked.
This includes checking and recommending action for:

• Password policy on length, complexity, changing
  
• Conditinal Access policies
  
• Policies for MFA, Risky users, Risky sign-ins
  
• Least-privilege principle for admin accounts and protection of the emergency user
  

Data sharing from SharePoint/OneDrive/Teams

The settings regarding data sharing with external users are checked.
This includes checking and recommending action for:

• Policies for SharePoint and Teams
  
• Document sharing from OneDrive
  
• Calendar sharing
  
• Documents Sharing from guests
  

Microsoft Secure Score

Microsoft Secure Score is a very handy tool for measuring the security posture of M365 Tenant.
It allows the customer to get an overview of the current security posture compared to other companies of the same size.
No expert knowledge is required for this, only the appropriate reading rights or roles, e.g. as Security Reader or Global Reader.
You can investigate the following portals:

• Microsoft 365 Defender Secure Score
  
• Microsoft Purview Comliance Score
  
• Microsoft Defender for Cloud Score
  
• Microsoft Entra Identity Secure Score
  

Some Microsoft recommendations do not directly affect your company. In order to assess and implement such recommendations, we offer our support.
Please write to us and we will gladly arrange a meeting regarding our services and your Microsoft 365 environment.