Microsoft 365 Security Audit
Estimate Microsoft 365 security posture across identity, email, collaboration, endpoint, privileged access, information protection, and Zero Trust controls—without connecting your tenant.
Assess controls without exposing the environment.
This questionnaire does not connect to your systems and never requests passwords, administrator access, security keys, or uploaded configuration files.
- Questionnaire answers are stored in the current browser session while you work
- Only the result summary is submitted when you request the full report
- Results are indicative, not a formal audit or certification
- You can clear answers by closing the browser tab or restarting the assessment
What this result means.
Is this an audit or certification?
No. This is an indicative self-assessment based on your responses. A technical audit, configuration review, VAPT engagement, or certification requires evidence validation and specialist testing.
What information is sent to Innogen?
Your answers remain in your browser while you complete the questionnaire. When you request the full report, your business contact information, overall result, and domain summary are submitted so Innogen can deliver the report and provide one relevant follow-up.
Should we enter passwords, keys, or sensitive configuration data?
No. Never enter passwords, recovery codes, access tokens, tenant credentials, personal data, or confidential configuration details. The tool only asks you to select control-adoption statements.
Can Innogen validate the result?
Yes. Innogen can perform a scoped technical assessment, review evidence, test configurations, prioritize findings, and support remediation.
Validate the result with Innogen security specialists.
Move from self-reported controls to technical evidence, configuration validation, testing, remediation priorities, and an implementation roadmap.