Quick Security Self-Assessment | TenantScan by Lowery Solutions

Before We Start

Tell us a bit about yourself.

6 questions. 60 seconds. No Microsoft login required.

Your information is used only by Lowery Solutions to follow up on your results if you'd like to discuss them. We do not sell or share your data. Privacy Policy.

Question 1 of 6

When someone at your firm logs into Microsoft 365, do they have to verify their identity a second way, for example through a phone app or a text message code?

This is sometimes called "two-factor" or "two-step" verification.

Question 2 of 6

If someone tried to sign into a Microsoft 365 account at your firm from another country right now, would anything automatically block or flag it?

Some organizations have policies that restrict logins to certain locations or flag unusual sign-in attempts.

Question 3 of 6

Has anyone at your firm ever received an email that appeared to come from your own firm's email address, but was not actually sent by anyone you recognize?

This is called email spoofing. Attackers use it to impersonate firms when contacting clients.

Question 4 of 6

When someone leaves your firm, how quickly is their Microsoft 365 account removed or disabled?

Former employees' accounts that stay active are one of the most common ways unauthorized access happens.

Question 5 of 6

Who manages and configures your Microsoft 365 environment day to day?

Microsoft 365 is not secure by default. The security settings require active configuration.

Question 6 of 6

Is your firm thinking about using Microsoft 365 Copilot AI tools in the next year?

Copilot can read everything a user has access to. Security hygiene matters before turning it on.

Your Preliminary Assessment

Loading your results…

Run the Full Automated Audit (Free) Schedule a Free 30-Minute Consultation Instead