Introduction
In recent years, the flexible work style, unbound by time and location, has gained traction, leading to a significant increase in the adoption of Microsoft 365 among major corporations and governmental bodies. However, the use of cloud services introduces various security risks, especially when authentication and data sharing settings are misconfigured, potentially resulting in severe outcomes like data breaches. Though Microsoft provides the Microsoft Secure Score as a crucial tool for administrators and security officers, managing and maintaining secure settings requires extensive expertise.
To address these challenges, SB Technology Corporation (SBT), headquartered in Shinjuku, Tokyo, has announced the launch of its new service, the "Security Posture Report for Microsoft 365," which will be available from November 25, 2025. This service aims to assist organizations that have implemented Microsoft 365 E3 and E5 in enhancing their security measures. By conducting thorough diagnostics of users’ Microsoft 365 environments based on the Microsoft Secure Score and CIS benchmarks, SBT helps identify vulnerable settings that could lead to information leaks and proposes appropriate measures in a report format to fortify security.
Background
The rapid shift towards cloud-based work during and after the pandemic has made it crucial for organizations to understand and manage their security settings effectively. The Microsoft Secure Score delivers valuable insights into an organization’s security posture, yet navigating through its features and maintaining secure configurations is often a daunting task requiring deep technical knowledge.
SBT aims to alleviate this problem by offering organizations a clear view of whether their Microsoft 365 settings meet Microsoft’s recommended configurations. When deficiencies are identified, SBT outlines actionable remediation steps, allowing organizations to effectively enhance their security frameworks.
SBT is recognized as a leading partner by Microsoft Japan, having won the prestigious “Microsoft Japan Partner of the Year” award in 2012, which they have claimed consecutively for 11 years since 2014. Additionally, SBT has attained various specializations in security areas including Identity and Access Management, Cloud Security, and Threat Protection, enabling them to provide expert assistance in reinforcing the security of clients' Microsoft 365 environments.
Features of the Service
1.
Two Plans for Detecting Misconfigurations
SBT offers two service plans: the Basic and Premium plans.
-
Basic Plan: This plan is rooted in CIS Benchmarks for Microsoft 365, assessing critical account and authentication settings along with data sharing protocols that are basic yet vital for security.
-
Premium Plan: In addition to the Basic Plan’s assessment, this plan incorporates detailed checks on audit logs, Microsoft Defender configurations, Data Loss Prevention measures, and information protection protocols, offering a more layered security assessment.
2.
Guidance and Support for Next Actions
The findings are compiled and analyzed into an easily understandable report that summarizes the Microsoft Secure Score. By clearly outlining necessary actions, the report helps prioritize critical enhancements. After a briefing on the results, SBT offers a five-business-day off-site support period to guide organizations in implementing the suggested improvements.
Plans and Pricing
Plans
| Plan | Diagnostic Items | Price (Excluding Tax) |
|---|
| -- | ----------- | ------- |
| Basic | 58 items included in the CIS Benchmark for Microsoft 365 | ¥700,000 ~ |
| Premium | 101 items, with additional security recommendations from SBT | ¥1,000,000 ~ |
Launch Date
The Security Posture Report for Microsoft 365 will commence on November 25, 2025. For more details about this service, click
here.
Note:
Microsoft Secure Score is a feature of Microsoft 365 that assesses and helps improve organizational security.
CIS Benchmark refers to best practice guidelines established by the Center for Internet Security (CIS), which address security settings for IT systems.
All company names, product names, and service names mentioned herein are the registered trademarks or trademarks of their respective owners.
Microsoft 365 is a trademark of the Microsoft Corporation in the U.S. and/or other countries.