Microsoft 365 tenant audit checklist

4slides. Screenshot a slide, download it as a PNG, or use your browser's Print → Save as PDF for a LinkedIn-ready multi-page carousel — each slide becomes one page.

solvingmicrosoft365.com

1 / 4

Microsoft 365 tenant audit checklist

A practical checklist for auditing a Microsoft 365 tenant's configuration, security posture, and compliance.

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/microsoft-365-tenant-audit

Slide 1Download PNG

solvingmicrosoft365.com

2 / 4

What should a Microsoft 365 tenant audit check?

Admin roles and PIM, Conditional Access coverage and exclusions, MFA registration, legacy authentication, external sharing settings and guest counts, licence utilisation, mail authentication (SPF, DKIM, DMARC), Secure S…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/microsoft-365-tenant-audit

Slide 2Download PNG

solvingmicrosoft365.com

3 / 4

How often should we audit the tenant?

A short monthly check of the volatile items (role assignments, Conditional Access exclusions, licence counts, new app consents) and a full audit twice a year or after major changes such as an acquisition or a new admin…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/microsoft-365-tenant-audit

Slide 3Download PNG

solvingmicrosoft365.com

4 / 4

Are there tools to automate a tenant audit?

Secure Score and Entra Recommendations in the portals, Microsoft's own CIS-aligned baselines, and community tools such as Maester (Pester-based tests), ScubaGear from CISA, and Monkey365 that run hundreds of checks and…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/microsoft-365-tenant-audit

Slide 4Download PNG

Auto-generated from Microsoft 365 tenant audit checklist. This page is not indexed and isn't part of the guide itself.