Field note / security baseline
An honest baseline routine, not a security product.
Plus adds configuration follow-up and a recurring review rhythm behind your brand. It is deliberately named a baseline - not a security operations centre, a monitoring product, or a promise against compromise.
What the routine covers
Configuration checks with a named decision owner.
The baseline routine reviews an agreed set of configuration areas on a fixed cadence - identity settings, access hygiene, and standard hardening checks that fit inside the Microsoft 365 and endpoint lanes already qualified for your partnership. Each observation is written down with enough context for your firm to decide what happens next.
Record anatomy
Every baseline observation carries the same four fields.
- Observation
- What configuration state was found, in plain language.
- Why it matters
- The practical risk or inconsistency the observation represents.
- Suggested action
- A concrete next step, not a vague recommendation to "improve security."
- Decision owner
- Who approves the change - your firm, your client, or a named delegate.
What it is not
Four claims this add-on does not make.
| Not included | What it would require instead |
|---|---|
| 24/7 monitoring or alerting | A separately scoped and contracted monitoring service. |
| Incident response or breach containment | A named incident-response owner and a written response plan. |
| A compliance or certification outcome | A qualified audit against a named framework, with its own scope and evidence. |
| A guarantee against compromise | No fulfilment relationship can honestly offer this. Baseline hygiene reduces exposure; it does not eliminate it. |
Read the plain answer on managed SOC claims →
See how a separately scoped monitoring and incident-response lane is qualified →
Cadence is a qualification variable
How often the review happens is agreed, not assumed.
A quarterly rhythm suits some partners; others want a tighter cycle around specific client segments. The right cadence depends on the environment, the client's risk tolerance, and how much change the tenant sees between reviews - all qualification questions, not public commitments.
Bring the baseline areas you want covered.
Identity hygiene, access review, and standard hardening checks are a reasonable starting scope for a fit conversation.