Monthly Security Care

Who it helps

Businesses that have completed a security review and want their settings checked on a regular cadence as things change.

What's included

• Review of available sign-in logs and security alerts since the previous cycle.
• Review of configuration drift against the settings agreed in your last hardening engagement.
• Review of administrative and access changes made since the last cycle.
• A running list of outstanding actions and their status.

What you receive

• A written summary after each review cycle.
• A clear log of what changed, what was flagged, and what remains outstanding.

How the engagement works

1. 01

   Cadence agreed

   We agree a review frequency and the log retention needed to support it before the first cycle begins.

2. 02

   Scheduled review

   On each agreed date, we review the available logs, alerts, and access changes within scope.

3. 03

   Written summary

   You receive a written summary after every cycle, including anything that needs your decision or action.

Boundaries & prerequisites

• This is a scheduled review, not continuous monitoring — findings are reported on the agreed cadence, not in real time.
• It does not include emergency incident response; a suspected active incident should be escalated separately.
• Review depth depends on the log retention your Microsoft 365 licensing provides — this is confirmed before the engagement starts.

Related guide