80+
Secure Score Target
Top Tier – Small Business
Microsoft 365 Tenants
MEASUREMENT FRAMEWORK
Microsoft Secure Score
Microsoft Secure Score measures your Microsoft 365 environment’s security configuration, scored 0 to 100. Innessco maintains all managed environments above a Secure Score of 80 – in the top tier of small business Microsoft 365 tenants.
Innessco reviews Secure Score recommendations on an ongoing basis and applies improvements during the regular management cycle.
MATURITY FRAMEWORK
Critical Controls
The NCSC New Zealand Critical Controls and CIS Controls are practical cyber-security control sets designed to help organisations reduce the likelihood and impact of common cyber attacks.
The NCSC New Zealand Critical Controls cover key areas including:
- Patch applications
- Patch operating systems
- Multi-factor authentication
- Restrict administrative privileges
- Application control
- Restrict Microsoft Office macros
- User application hardening
- Regular backups
Innessco manages environments to align with these Critical Control principles as part of the standard managed service. For firms that need to demonstrate alignment to insurers, regulators or internal stakeholders, Innessco can provide a current-state assessment and remediation plan.
Reporting
Innessco provides regular security reporting covering Secure Score status, users approved for access from outside New Zealand, and backup status. Security-related changes are managed through change control, with a risk assessment included where appropriate. Clients are advised of security incidents and any follow-up required.
This gives your firm practical evidence that key security controls are being monitored and managed over time.
