m365 - Metis Security

What Auditors Really Scrutinise in a Microsoft 365 Audit

18 September 2025Byweb-bossCloud Security, Data Privacy, Data protection, M365 Security, Strategy and planningassessment, m365, Security, trusted advisor0

A Microsoft 365 security assessment is valuable, however governance aspects identified through and audit are just as important — JML, Ops Support & IR.

What Good Looks Like: Microsoft 365 Governance in Practice

6 June 2025Byweb-bossCloud Security, Data Privacy, Data protection, M365 Security, Risk Management, Strategy and planning, Trusted Advisorbest practice, m365, Security, trusted advisor0

Microsoft 365 security failures are often blamed on a missing control, or feature, these matter, but they are rarely the root cause - the lack of governance is!

Is Microsoft 365 Really Enough for ISO 27001 Compliance?

12 March 2025Byweb-bossCloud Security, Data Privacy, Data protection, M365 Security, Risk Management, Strategy and planningassessment, best practice, Business, m365, Security0

Microsoft 365 is frequently described as an “ISO 27001–aligned platform”. In isolation, that statement is not incorrect. However...

External Sharing in Microsoft 365: Convenience vs Risk

29 November 2024Byweb-bossCloud Security, Data Privacy, Data protection, M365 Security, Security Architecture, Strategy and planningassessment, best practice, m365, Security0

External sharing is one of Microsoft 365’s greatest strengths — and one of its most misunderstood risks. This article discuses how to reduce your exposure.

The Most Common Microsoft 365 Misconfigurations We See

18 September 2024Byweb-bossCloud Security, Data protection, M365 Security, Security Architecture, Strategy and planningassessment, best practice, m365, Security0

The majority of Microsoft 365 compromises exploit well-known, repeatable misconfigurations that have existed quietly for months or years.

The False Sense of Security Created by Microsoft Defender

26 July 2024Byweb-bossCloud Security, Endpoint security, Infrastructure Security, M365 Security, Risk Management, Strategy and planningbest practice, m365, Security0

Many organisations believe that because they have Microsoft Defender licensed, they are “covered”. This assumption is very dangerous.

Why Microsoft 365 Tenants Start Insecure — and Stay That Way

10 May 2024Byweb-bossCloud Security, M365 Security, Risk Management, Security Architecture, Strategyassessment, best practice, m365, Security0

A large number of Microsoft 365 tenants remain insecure — because security is often assumed, misunderstood, or allowed to drift.

Identity Is the New Perimeter: How Attackers Exploit Microsoft 365

29 April 2024Byweb-bossCloud Security, Data protection, M365 Security, Security Architecture, Strategyassessment, best practice, m365, Security0

Traditional perimeter security assumed that if you protected the network, you protected the organisation. Microsoft 365 has rendered that model obsolete.