A clearer path to
Microsoft 365.

For a new deployment, have a tested MFA rollout before production use. Do not share passwords or recovery codes here.

Know who has privileged access, use least privilege and document emergency access arrangements.

Include account ownership, removing access and handling former employees' data.

Confirm the registrar and DNS owner. Do not change mail records until your migration or configuration plan is approved.

Include aliases, shared mailboxes, forwarding, scanners, applications and third-party senders.

Understand every legitimate sender. For migration, prepare and test the changes rather than copying records blindly.

Check current Microsoft requirements for the services you need. Include personal devices used for work.

Consider encryption, endpoint protection, update control and work-data handling on personal devices. Features depend on licensing.

Include remote workers, Teams calls, file access and any integrations your business cannot operate without.

Know which files belong in OneDrive or SharePoint and how external sharing will be controlled.

Define recovery needs and test restoration. Sync, retention and backup serve different purposes; select protection appropriate to your needs.

Include deletion, sensitive information and any obligations that apply to your organisation. This tool does not assess legal compliance.

Match email, apps, security and device management needs to current plan entitlements. This assessment does not select or price a plan.

For existing environments, consider your next change. Include communications, testing and clear go/no-go responsibilities.

Cover MFA, phishing reporting, file sharing and who to contact when something goes wrong.