• How We Measure and Report Your Firm's Security Posture.

    A secure environment needs to be measurable. Innessco uses two frameworks: Microsoft Secure Score for ongoing platform hygiene, and the ASD Essential Eight for baseline maturity alignment.

     80+

    Secure Score Target

    Top Tier – Small Business
    Microsoft 365 Tenants

    MEASUREMENT FRAMEWORK

    Microsoft Secure Score

    Microsoft Secure Score measures your Microsoft 365 environment’s security configuration, scored 0 to 100. Innessco maintains all managed environments above a Secure Score of 80 – in the top tier of small business Microsoft 365 tenants.

    Innessco reviews Secure Score recommendations on an ongoing basis and applies improvements during the regular management cycle.

    MATURITY FRAMEWORK

    ASD Essential Eight

    The Essential Eight is a set of baseline security mitigation strategies developed by the Australian Signals Directorate. It is structured around three maturity levels across eight control areas:

    • Patch applications
    • Patch operating systems
    • Multi-factor authentication
    • Restrict administrative privileges
    • Application control
    • Restrict Microsoft Office macros
    • User application hardening
    • Regular backups

    Innessco manages environments to Essential Eight alignment as part of the standard managed service. For firms that need to demonstrate a specific maturity level to insurers or regulators, Innessco can provide a current-state assessment and remediation plan.

    Reporting

    Innessco provides regular security reporting covering Secure Score status, users approved for access from outside Australia, and backup status. Security-related changes are managed through change control, with a risk assessment included where appropriate. Clients are advised of security incidents and any follow-up required.

    This gives your firm practical evidence that key security controls are being monitored and managed over time.