Evaluated controls only.
Interactive demo report
View licence plansThis is how GraphSec presents a Microsoft 365 tenant assessment.
All names, values and results are fictional. The generated report may change technically, in content and visually with future product versions.
Demo report – not a real tenant scan
This page demonstrates the intended structure and user experience.
assessment_contoso_2026-08-04.html
ConfidentialAssessed tenant
Contoso GmbH
Tenant: contoso.onmicrosoft.com · Scan time: 4 August 2026, 18:42
Technically evaluated45/53
8 controls require further evidence.
Privileged access is the primary technical risk.
Two administrative accounts are outside the intended strong-authentication policy. External sharing and legacy-protocol exceptions also require remediation.
1
Protect admin accounts: review and remove policy exclusions.
2
Restrict external sharing: disable anonymous links on sensitive sites.
3
Close coverage gaps: obtain the required Intune and risk data.
Identities and admin access61%
Apps and OAuth75%
Devices and endpoints82%
Email and collaboration70%
Detection and recovery58%
Failed
IAM-01Strong authentication for privileged accounts
Two of seven privileged accounts are outside effective policy coverage.
Show evidence and recommendation
Technical evidence
Policy: Require-Phishing-Resistant-MFA
Excluded accounts: 2Recommended action
Review justified exceptions and remove unnecessary exclusions.
Warning
COL-01External sharing in SharePoint and OneDrive
Anonymous links remain available on two sensitive sites.
Passed
MAIL-02Enforced secure mail transport
The assessed partner domains use appropriate TLS transport rules.
Not tested
DEV-02Device compliance in Microsoft Intune
The required Intune data source was not available.
No control matches the selected filter.
A control that was not tested is neither passed nor failed. The report records the reason and next step.
| ID | Control | Status | Reason | Next step |
|---|---|---|---|---|
DEV-02 | Intune compliance | Licence missing | Intune data source not licensed. | Review licensing and repeat. |
IAM-09 | Risky users | Permission missing | Required Graph permission unavailable. | Review admin consent. |
RES-01 | Backup and recovery | Manual evidence | Restore test is outside the tenant. | Attach test evidence. |
INFOConnected to Microsoft Graph
WARNINGDEV-02 not tested · Intune licence missing
INFOHTML, JSON, CSV and SHA-256 manifest exported
How to read the report
Status, coverage and evidence are presented separately.
This shows whether a control passed, failed or could not be evaluated due to missing data.
Passed
The defined criterion is met.
Warning
An exception or incomplete evidence requires review.
Failed
The technical criterion is not met.
Not tested
A licence, permission or external document is missing.
Generate this type of report for your own customer tenants.
Compare licence plans Compare the three licence plans and usage rights.