Deep Dive Microsoft 365 Security Baselines
- Date
- Time (local)
- 14:30 – 15:30
- Format
- Microsoft Teams Townhall
About this event
Deep dive into Microsoft 365 security baselines, from Security Defaults and Baseline Security Mode to the CIS Microsoft 365 Foundations Benchmark v7.0.0. Covers why baselines matter, the most common real-world findings, and how to measure and evidence posture instead of assuming it.
A Microsoft 365 tenant does not become insecure through an attack. It becomes insecure through three years of reasonable decisions taken one at a time.
This 90-minute practitioner session walks through the baseline landscape (Security Defaults, Baseline Security Mode, CIS Foundations, CISA SCuBA) and then focuses on the CIS Microsoft 365 Foundations Benchmark v7.0.0. You learn how the benchmark is structured, what changed in the latest version, and which seven findings appear in almost every real tenant assessment — from missing break-glass accounts and non-phishing-resistant admin MFA to DMARC parked at p=none and anonymous sharing. The session shows how to move from a static benchmark to measurable, evidenced posture and includes a live demo of an automated assessment approach. You leave with a clear 30/60/90-day roadmap and practical rules that keep a hardening project alive.
What you will take away
Agenda
- Time:
until 14:40
Why baselines exist
A Microsoft 365 tenant does not become insecure through an attack. It becomes insecure through three years of reasonable decisions taken one at a time.
Speaker: Drago Petrovic · Chief Technology Officer
- Time:
until 14:50
The baseline landscape
Four different things are called a "Microsoft 365 security baseline". They sit at different depths, cost different amounts of effort, and are not alternatives to each other.
Speaker: Drago Petrovic · Chief Technology Officer
- Time:
until 15:00
CIS Microsoft 365 Foundations, up close
How a recommendation is built, how the benchmark is organised, and what version 7.0.0 changed on 19 May 2026.
Speaker: Drago Petrovic · Chief Technology Officer
- Time:
until 15:10
What actually fails in real tenants
Seven findings that turn up in almost every Microsoft 365 assessment we run — with the fix for each. None of them are exotic.
Speaker: Drago Petrovic · Chief Technology Officer
- Time:
until 15:20
From benchmark to evidence
Knowing the controls is the easy half. Knowing where your tenant stands against all of them, today, and being able to prove it — that is the work.
Speaker: Drago Petrovic · Chief Technology Officer
- Time:
until 15:30
dotCLOUD Assessor
Roadmap, your 20% voucher, and Q&A - A 30/60/90 day plan you can start on Monday.
Speaker: Drago Petrovic · Chief Technology Officer
Speakers
Drago Petrovic
Chief Technology Officer, dotCLOUD | MSB365
Drago is a Microsoft MVP with over 20 years of experience in IT infrastructure, cloud solutions, and enterprise collaboration. He specializes in Microsoft 365, Azure, and PowerShell automation. Drago is passionate about sharing knowledge and helping organizations leverage Microsoft technologies to improve productivity and security.
How to join
Microsoft Teams Townhall
Online via Microsoft Teams. No travel needed.
Joining links are personal. Register and confirm your email – the links are then on your personal registration page.