// compliance / cism365
CIS Microsoft 365 Benchmark Assessment
GlobalCIS Benchmark | Global
Assess your Microsoft 365 tenant against the CIS Benchmark — the industry-standard security configuration guide recognised by auditors worldwide.
Single report, no commitment.
Continuous monitoring — fresh report every 30 days.
Available in AUD, USD, GBP, EUR, SGD. MSP partners get volume discounts via the partner programme.
What it scores
7 domains
Identity, Apps, Data, Email, Auditing, Storage, Teams
CIS Level 1 and Level 2 controls scored separately
Conditional Access, MFA, and authentication method analysis
SharePoint sharing and Teams guest access review
Application consent and OAuth permission audit
Prioritised remediation with CIS control references
Microsoft APIs
- Microsoft Graph (universal scopes, read-only across the tenant)
- Azure REST (when the product reads Azure subscription posture)
- Defender + Intune APIs where applicable
Customer prerequisites
- Microsoft 365 tenant with admin-consent capability
- Global Reader or equivalent for the consenting admin
- No agent installs, no infrastructure changes required
- Report delivered by email within 10 minutes of consent
Other Compliance
Assess your compliance with the ACSC Essential Eight Maturity Model. Mandatory for Australian Government entities under …
Assess your Azure and Microsoft 365 environment against the Microsoft Cloud Security Benchmark v2 — 14 control domains c…
Automated and governance-hybrid assessment against APRA's CPS 234 standard. Built for banks, insurers, and super funds t…