Free guide · 5 controls · for organizations on Microsoft 365
Your cyber insurance form asks five security questions. Make every “yes” true.
A plain-language guide for executive directors, CFOs, and IT leads at nonprofits, foundations, and rural hospitals.
- Price
- Free
- Time
- About 20 minutes
What you get
- The five controls insurers ask about
- Where each one already lives in Microsoft 365
- The evidence to keep before you sign
Not sure this is the right first step? Take the three-minute Opportunity Finder
- Microsoft Solutions Partner, five solution-area designations
- In business since 2004
- Not an insurance broker: we fix the controls, not the policy
Get the readiness guide
It opens on this page as soon as you submit. A copy goes to your inbox.
Here's your readiness guide.
Open it now. A copy is on its way to your inbox from Chris.
Open the guide (PDF)Want us to check it against your tenant? The Cyber Insurance Readiness Review compares your insurer's questionnaire to your Microsoft 365 settings, control by control, and gives you a gap list, an evidence pack, and a plan timed to your renewal. It's $1,950, credited in full toward M365 InstantOn if you go ahead within 30 days.
Book a 15-minute fit callThe five controls, no form needed
What insurers ask, and where it already lives.
| What insurers ask about | Where it lives in Microsoft | In Business Premium? |
|---|---|---|
| MFA for every user | Entra ID P1, Conditional Access | Yes |
| Email security | Defender for Office 365 Plan 1 | Yes |
| EDR on every device, and someone watching | Defender for Business | EDR yes; monitoring is a service |
| Security awareness training | Defender for Office 365 Plan 2 | Add-on |
| Backups protected from ransomware | Microsoft 365 Backup | Billed separately |
The guide covers what “done” looks like for each one and what to keep on file.
What's inside
Everything to check before you answer “yes.”
- What “done” looks like for each control, in plain language.
- The evidence to keep on file, so every answer holds up if you ever file a claim.
- The common gaps: the “temporary” MFA exceptions, the servers Defender never reached, the restore nobody tested.
- The question about “segregated” backups, and why your answer depends on the exact wording.
- An 11-item checklist to run before you sign the renewal.
Why this exists
Licensed isn't the same as switched on.
Renewal forms used to ask whether you had antivirus. Now they ask if MFA is enforced for every user, whether every device runs EDR, and who responds to an alert at 2 a.m.
Your answers count. In 2022, after a ransomware claim, Travelers asked a federal court to rescind a policy, saying the insured's application overstated its use of MFA.
Most organizations on Business Premium already pay for three of the five controls, and a fourth is one add-on away. The gap is usually configuration, not new spending. This guide shows where to look.
Who made it
Written by the people who set these controls up.
Questions
Before you submit.
Is this insurance advice?
No. We're a Microsoft partner, not a broker. We don't sell coverage or set premiums, and no control guarantees coverage or a lower rate. We help you put the controls in place and document them.
We aren't on Business Premium. Still useful?
Yes. The five questions are the same. Which Microsoft tool answers each one depends on your licensing.
Do I need admin rights to use it?
No. It's a guide, not a scan. To check your own settings you'll want someone with read access to the Microsoft 365 admin centers.
What happens after I submit?
The guide opens here and a copy arrives by email within a few minutes. After that, occasional notes from Chris on running Microsoft 365, unsubscribe any time.
Read it before you sign your next renewal.
Five controls, one checklist, about 20 minutes.
Not sure this fits? Take the three-minute Opportunity Finder (no email needed).