Free working resource
AEGITz M365 Hardening Checklist
A concrete hardening baseline for Microsoft 365 in a small business, with the specific settings, why each matters, and what breaks if you rush it.
XLSX
Ready to use
The resource is available without a form.
- Download without an email gate
- Formula cells checked for errors
- Designed for executive and operator use
- Connected to the method behind it
How to use it
Start with evidence. Finish with a decision.
- 01Download and save a working copy.
- 02Complete the inputs with the people who own the process.
- 03Review gaps, assumptions, and scores together.
- 04Turn the result into named actions and owners.
The decision this supports
Use the completed resource to make the next conversation specific.
Microsoft 365 ships in a configuration designed to work immediately for the widest range of customers, which is a poor default security posture. Most controls a small business needs are already in the license: blocking legacy authentication, restricting user consent, disabling external forwarding, and setting default sharing links to specific people.
The connected guide explains the reasoning behind the questions, the evidence worth keeping, and the tradeoffs leadership should review before approving work.