COMPLIMENTARY List price $800.00 · 100% discount · total due $0.00 · no obligation.
1. Purpose
Ally Solutions performs a read-only security assessment of your Microsoft 365 tenant and delivers a written, prioritized report with a review meeting. Proactive, not reactive: fewer surprises, clearer communication and a structured approach to closing gaps.
2. Scope
- Identity & access: Conditional Access and MFA coverage, legacy authentication, Global Administrators and privileged-role sprawl, authentication methods and SSPR, consent settings, guest access, Identity Protection risk (where licensed).
- Microsoft Secure Score and the Defender for Office 365 / Exchange Online signals it exposes.
- Collaboration: SharePoint and OneDrive sharing, unmanaged-device access.
- Devices: Intune enrollment and compliance coverage.
- Email domain authentication: SPF, DKIM and DMARC for every verified domain.
- Benchmarks: CIS Microsoft 365 Foundations Benchmark v3.1 (assessable controls), CIS Controls v8.1 IG1/IG2, Ally Solutions baseline standards.
3. Out of scope
No changes are made to your tenant. Remediation, endpoint or network scanning, penetration testing, Microsoft Purview detail, Teams meeting policies and third-party applications are not included.
4. Method and access
Evidence is collected through our read-only Microsoft Entra application integration (Read.All application permissions only). Your Global Administrator grants consent with a one-click link; no passwords or devices are shared; consent can be revoked at any time in the Microsoft Entra admin center.
5. Deliverables
- Ally-branded assessment report (PDF): executive summary, prioritized findings with recommendations and effort, CIS alignment, email-authentication results, 0–90 day roadmap.
- 45-minute review meeting with an Ally Solutions engineer.
6. Timeline
| When | Milestone | Who |
|---|---|---|
| Day 0 | Quote approved. Consent link emailed to your Global Administrator. | You / Ally |
| Day 0–5 | Read-only integration approved (reminders every 24 hours for up to 3 days). | You |
| Within 24 hours of consent | Assessment runs and is scheduled automatically; confirmation email with the booking link. | Ally |
| +1–3 business days | Engineer review and report finalization. | Ally |
| +3–10 business days | Review meeting (you book it). Report delivered at the meeting. | You / Ally |
7. Your responsibilities
- Confirm you are authorized to request a security review of this Microsoft 365 tenant.
- Have a Global Administrator approve the read-only integration within 5 business days.
- Book and attend the review meeting.
8. Data handling & confidentiality
Configuration evidence and the report are stored in Ally Solutions' Azure tenant, access-restricted to Ally staff, and retained for 90 days after the review meeting unless you engage us. The report is confidential to you. User mailbox contents and files are never accessed.
9. Fees
Assessment list price $800.00; complimentary discount 100%; total due $0.00. No purchase order or payment is required.
Ally Solutions · 7475 Dakin St., Suite 650, Denver, CO 80221 · (303) 223-4134 · helpdesk@allysolutions.com · Mon–Fri 8–6 MT · Terms: allysolutions.com/legal