Skip to content
Kozbica IT

Example

What a Security Baseline looks like

A report you can read without an IT background: what is in good shape, what can be better and what to tackle first.

Fictional example. All data is made up and does not come from a real client.

Summary

The basics are in order: updates run automatically and the laptops are managed. The biggest risks are in access: MFA is not yet on for everyone and some admin rights are not needed.

Example Secure Score52% (fictional)

What is already in good shape

  • Windows and Office updates run automatically
  • All laptops are managed and encrypted
  • The most important files are backed up

What can be better, in order of importance

Findings with priority, recommendation and effort
PriorityFindingRecommendationEffort
HighMFA is not on for all usersMake MFA mandatory, starting with administratorsSmall
HighThree accounts have admin rights that are not neededReduce rights to the minimum (least privilege)Small
MediumSign-ins from unknown countries are not blockedAdd a Conditional Access ruleMedium
MediumOld guest accounts and unused licencesClean up and check yearlySmall
LowNo fixed procedure for leaversDocument onboarding and offboardingMedium

What you can do with it

You decide what to pick up. On request I carry out the improvements, billed per hour. You remain the owner and administrator of your own environment.

Back to the Security Baseline