Consulting services / ITKoncept
Microsoft 365 security, mail flow and licensing reviewed with read-only access by a senior architect at a fixed price.
Book a Microsoft 365 assessmentAn ITKoncept Microsoft 365 assessment reviews security, mail flow and licensing in your environment with read-only access. A senior architect carries out the review. You receive an executive summary, a prioritised action list and potential annual licence savings in SEK. Fixed price from SEK 24,900 excl. VAT for up to 50 users. A re-check after 30 days is included.
Identity and access in Entra ID: MFA, conditional access, legacy authentication, administrator roles, emergency access accounts, guest and inactive accounts, and app registrations and consents.
Exchange Online and mail flow: SPF, DKIM and DMARC for all domains, connectors and transport rules, forwarding to external addresses, shared mailboxes, SMTP AUTH, POP and IMAP, and protection against spam and malware.
Defender for Office 365 and Secure Score: Safe Links, Safe Attachments and phishing protection, and the Secure Score actions that deliver the greatest impact for the effort involved.
Licensing: unused, duplicate and incorrectly tiered licences, inactive accounts with licences, and the right plan for each role.
Sharing in SharePoint, OneDrive and Teams: external sharing, anyone links, link expiry, guest access and teams without owners.
Backup, retention and logging: the audit log, retention policies and whether Exchange, SharePoint and OneDrive are backed up.
Hybrid and on-premises remnants (Plus): Entra Connect or Cloud Sync, remaining Exchange servers and SMTP relays, and old MX and autodiscover DNS records.
For an in-depth look at SPF, DKIM and DMARC, see our email security service.
One-page executive summary: status by area, the five most important risks and potential annual licence savings in SEK.
Prioritised P0–P2 action list: for each finding: what, why, how, estimated effort and whether you can address it yourselves. P0 means it should be addressed the same week.
Technical appendix: configuration evidence, checks mapped to the CIS Microsoft 365 Foundations Benchmark, and Secure Score.
90-minute walkthrough: in Teams or on site in the Stockholm area, with management and the person responsible for IT.
Re-check after 30 days: Secure Score and the status of P0 and P1 are checked again and the action list is updated.
| Package | Price | Scope | Report |
|---|---|---|---|
| Basic | SEK 24,900 excl. VAT | One tenant, up to 50 users | Within 5 working days of access |
| Plus | SEK 39,900 excl. VAT | Up to 250 users or a hybrid environment, including hybrid and on-premises remnants | Within 10 working days of access |
Larger environments and multiple tenants are quoted individually.
If your environment turns out to be larger than the chosen level, we tell you before work starts, never afterwards.
The price is credited if you order remediation of at least the same value within 3 months. A re-check after 30 days is included.
Book a Microsoft 365 assessmentWe confirm the package and scope based on your environment and schedule the start.
You assign us the Global Reader, Security Reader and Exchange View-Only roles. No changes are made to the environment, and access is removed after delivery. NDA if needed.
The report is delivered within 5 working days of access for Basic and within 10 working days for Plus.
We walk through the findings in 90 minutes and check the status again after 30 days.
We work remotely across Sweden and on site in the Stockholm area.
Is a breach happening right now? Go to Under attack.
Common questions
Basic costs SEK 24,900 excl. VAT for one tenant with up to 50 users. Plus costs SEK 39,900 excl. VAT for up to 250 users or a hybrid environment. Larger environments are quoted individually. The price is credited if you order remediation of at least the same value within 3 months.
The review is a scoped initial look at selected settings with a short written summary. The assessment is a full review with licence calculations, a prioritised action list, a walkthrough and a re-check after 30 days.
No. We work with read-only access that is removed after delivery. Remediation is only carried out if you order it as a separate assignment.
We start within 5 working days. The report is delivered within 5 working days of receiving access for Basic and within 10 working days for Plus. We then hold the walkthrough.
We tell you before work starts, never afterwards. You can choose Plus or get a quote for larger environments.
Read-only access: Global Reader, Security Reader and Exchange View-Only. You assign the roles and remove them when we are finished. We do not need administrator rights.
Yes. The checks are mapped to the CIS Microsoft 365 Foundations Benchmark, so the results can be shown to an auditor or a cyber insurer.
You can address the findings yourselves using the action list or engage us. After 30 days we check Secure Score and the status of P0 and P1 again. If you order remediation of at least the same value within 3 months, the price is credited.
The assessment shows how your Microsoft 365 environment is protected and what should be addressed first. It is not a legal assessment of NIS2 compliance, but the action list can support that work.
Consulting services / ITKoncept
Understand the current environment, assess options and plan delivery.
Migration, operational support and troubleshooting in your environment.
Rollout, Teams Phone, migration and governance of Teams.
Map your senders and take control of mail authentication.
An initial review with a short written summary.