What is Microsoft Secure Score and Why Does it Matter?
Microsoft Secure Score is an evaluation of a companies security, the higher the score the more secure your actions and system are. To receive access you have to be assigned to a specific role in Azure Active Directory. It works in a variety of different ways, including:
- Configuring recommended security features
- Doing security-related tasks
- Addressing the improvement action with a third-party application or software, or an alternate mitigation
This works with a point system within Microsoft, however some tasks have to be fully completed first in order to improve your score. Your secure score can improve in increments of 10 points or less. Your score is updated every second and new information is received in real time for the best accuracy. There’s numerous ways to improve your score everyday including, requiring 2FA for all roles and enabling legacy authentication blocking. Additionally, there are multiple products that are included in Secure Score including:
- Microsoft 365 (including Exchange Online)
- Azure Active Directory
- Microsoft Defender for Endpoint
- Microsoft Defender for Identity
- Cloud App Security
- Microsoft Teams
You’re able to integrate any of these within Microsoft Secure Score, and are able to track your improvement and score within. With all of this in mind, please remember that no online service is completely protected from security breaches in any circumstance. If you’d like to learn more about Microsoft Secure Score and get started, click here.
Eric is the owner and CEO of Protek Support and is a CISSP (Certified Information Systems Security Professional). He graduated from Utah State University with a Bachelors of Science degree in Business with an emphasis in Information Technology (IT). He is an IT Services expert in a variety of technology related fields. Some of these fields include document management software/hardware, enterprise level networking and VoIP phone systems, as well as large scale software implementation projects and the setup of small business networks.