AppDirect Microsoft Platform Consulting

Build a foundation for remote work

• The Microsoft 365 Security Assessment gives you a realistic and extensive overview of the cybersecurity risks that you are faced with right now; and the threats that you will be facing in the future. Together with you, we make a detailed plan to tackle the risks and threats as efficiently as possible, to enable your employees to work securely when on the go, and to protect your company data.

What’s included in the assessment

• General Security Settings and Configuration
• Teams Settings and Configuration
• SharePoint Settings and Configuration OneDrive Settings and Configuration
• Exchange Settings and Configuration
• Authentication Settings and Configuration
• Organizational Settings and Configuration
• Performing Security Assessments and Reviews with Microsoft Secure Score

Best practices

• We only use Microsoft's best practices and tools to analyze your security logs and warnings. Moreover, we process all information in your own Microsoft tenant. This means that your data remains secure in your own environment. In your evaluation report, we not only evaluate your cybersecurity policy and measures but also include instructions and training, if required, for the configuration and management of Microsoft 365.

Secure user access by protecting the identity

• AppDirect will help you with a Microsoft 365 identity protection pilot to be able to successfully deploy a complete solution, which includes evaluating the current environment and security requirements, and a deep dive into the Azure Active Directory features that could improve the security of accounts. We work closely with your IT team to plan and design an identity protection solution to support a production-ready deployment.

What’s included in this engagement

• • Require MFA challenge via Microsoft Authenticator for all users
• • Restrict legacy authentication protocols
• Knowledge transfer on proper administration and configuration of identity protection
• Develop a roadmap plan for the adoption of security features of Microsoft 365
• • Set up self-service password reset (SSPR) for your users
• • Enable password management
• • Security monitoring, alerts, and machine learning-based reports
• • Azure role-based access control (Azure RBAC)
• • Multi-Factor Authentication
• • Single sign-on
• Configuration of the identity components to integrate with your existing environment
• Installation and configuration of Azure Active Directory Premium, Cloud App Security, Azure Advanced Threat Protection, and more if needed
• Gather business and technical requirements to ensure a successful project

Best practices

• AppDirect will provide Microsoft-certified engineers to perform all work and comply with Microsoft best practices. AppDirect’s team will perform the standard test procedures to ensure the services are working as expected.

Safeguard your device with Microsoft Intune

• One of the most important tasks involved in securing remote work is onboarding devices into Azure AD and Intune. With Intune, you can manage multiple devices per person, and the different platforms that run on each device, including iOS/iPadOS, macOS, Android, and Windows. It’s vital to have visibility into the devices owned by the business because you can’t secure what you can’t see.

What’s included in this engagement

• Ensure devices are compliant with your company’s security requirements
• This service has been designed to protect your desktop and mobile devices and your business applications. Our Microsoft Certified Consultants work with your IT and Security teams to:
• Support a diverse mobile environment and manage devices securely
• Protect sensitive information and control the way employees access and share data
• Provision and deployment of desktop devices using Windows Autopilot
• Protection of company-owned devices with Mobile Device Management policies
• Bring your own device (BYOD) access with Mobile Application Management policies
• Conditional Access Policy

Best practices

• It’s critical that only the right people with the right resources on secure devices can access your data from anywhere. Microsoft Conditional Access is an intelligent policy engine built for this challenge. Its robust controls allow you to define specific conditions for how users authenticate and gain access to apps and data. AppDirect’s team will provide best practice recommendations for how you can customize and manage automated policies and get reporting on the policies applied for each sign-in.

Prevent cyber attacks with Microsoft Defender

• Defender for Business provides a centralized security experience for Windows and non-Windows platforms. You'll be able to see alerts and incidents from various supported operating systems (OS) in Microsoft 365 Defender and better protect your organization's network.
• This service has been designed to enable modern enterprise-grade endpoint security at scale, and includes the configuration of the following Microsoft 365 Defender components:
• Microsoft Defender for Endpoint, Identity & Office 365
• Centralized management for Defender for Endpoint (Intune)
• Next-generation protection configuration
• Attack surface reduction configuration
• Onboarding Windows devices to the service
• Configure Microsoft Defender for Endpoint capabilities
• Deploy policies to prevent, detect, investigate and respond to advanced threats
• Endpoint detection and response configuration

Best practices

• Our Microsoft Certified Consultants work with your IT and Security teams to deploy Defender for Business to elevate your security from traditional antivirus to next-gen antivirus protection, endpoint detection and response, and threat and vulnerability management. Hybrid work is here. How do you make it secure for your business? AppDirect has cloud experts and best practices to help your team monitor advanced threats and reduce costs.