BTT Armour — Security Without Compromise.

- Ensuring secure file sharing with external contacts (guest privileges, secure links, verification codes)
- Management of internal and external users' access to company information
- Computers files synchronization with the cloud
- Data recovery / deletion (as required, depending on Microsoft tools and capabilities)

- Email protection against spam, malware and known threats
- Appropriate password policy implementation
- Continuous updating of Office applications (depending on the capabilities of the M365 plan)
- Enable audit logging of user activity logs
- Activate and ensure Multi-factor authentication
- Activate and ensure single sign on (SSO)
- Authorization of Microsoft Teams guests or external users

- Configure security features and settings on Windows 10 PCs and mobile devices - Prepare and activate AutoPilot for automatic Office installation and updates
- Develop and implement a security strategy to protect business data on all devices, including iOS, Android®, and Windows PCs
- PC and mobile device management and maintenance

- Activating and maintaining protection against sophisticated threats hidden in email attachments and links
- Enable remote wipe to prevent data leakage on a lost or stolen device
- Control who has access to company information by applying restrictions like do not copy and do not forward (labels)
- Enable unlimited cloud archive and long-term preservation policies to ensure you never lose an email with Exchange Online Archiving
- Enforce malware protection to help keep your Windows 10 devices safe from viruses, spyware, and other malicious software with Windows Defender
- Enable Bitlocker protection against unauthorized access to files and folders on computers
- Activate Conditional access policy to restrict access from devices that do not meet company requirements: not connected to a domain, not using MFA, IP address not allowed, etc.

- Preparation of a technical implementation plan to increase safety
- Implementation project
- Continuous monitoring of the M365 environment, systematic modernization of developed policies
- Presentation of security incident reports

- Checking and evaluating the existing M365 tenant configurations - Security assessment of the current M365 tenant
- Suggesting necessary tweaks and enhancements, followed by implementing these recommendations.

- Preparing a technical implementation plan to increase security
- Executing the designated tasks.
- Continually supervising the M365 environment, regularly updating established -policies, and sharing reports on security incidents.

- Managing identity and access controls, including user identity management, access protocols, password policies, and multifactor authentication to ensure only authorized users gain access to our organizational resources.
- Establishing geographic policies that define the locations from which users can access internal company data.
- Activating tracking of user actions within the M365 environment to prevent unauthorized data removal or misuse; managing smart devices, ensuring mobile devices and personal computers are controlled, protected, encrypted, and adhering to security policies, alongside performing status checks.
- Implementing conditional access for devices and users, demanding additional authentication measures so that only company devices and users can access sensitive data.
- Protecting data through classifying and labeling non-public documents, enforcing policies, and managing access to information based on the user's identity and device used. Configurations for non-organization data sharing are in line with GDPR.
- Monitoring and detecting threats, reacting to any security incidents instantly.