Remediation is scoped from findings, not from a package. You approve the list, we do the work in the order that makes sense, and every change is written down.
Remediation is the work of turning a list of findings into a tenant that is actually configured properly. It follows the Security and Cost Review, or it follows a report somebody else wrote, and the scope is whichever items you approve.
The order is not arbitrary. Some changes depend on others, and one of them, enforcing multi-factor authentication, will interrupt everybody for a few minutes and is worth planning rather than springing on a Tuesday.
Which of these apply depends entirely on the findings. Nobody needs all eight.
Item by item, with the reasoning attached. Anything you decline is recorded as declined rather than quietly dropped.
Before any change is made.
MFA enrolment and anything touching mail routing are scheduled with you rather than around you.
Changes made, tested, and checked against the finding they were meant to close.
Written for whoever comes next, not for us.
Commonly paired with:
Not always. If you already know what is wrong, for example every account needs MFA enforced and nobody has done it, we can quote that piece directly.
Where the review earns its place is when the answer to "what needs fixing" is a shrug. Quoting remediation without knowing what is in the tenant produces a number that is wrong in one direction or the other.
Some of it will, and we would rather say which parts up front than surprise you. Enforcing multi-factor authentication means everybody enrolls, which is a short interruption on a day of your choosing. Changing mail routing is done outside working hours.
Most of the rest, licence cleanup, removing dormant accounts, tightening sharing, happens without anybody noticing.
That is normal and often correct. Some findings are worth accepting: a control that would break how a team genuinely works is not an improvement.
We put the reasoning next to each item so you can make that call rather than defer to us. What we will not do is quietly drop something important and let the report look complete.
Yes. Every change is written down: what it was, what it is now, and why. That record is yours and it is the thing that makes the next review cheap.
It also matters when somebody else takes over. Undocumented changes are how a tenant becomes a mystery again within two years.
A fixed scope review of who has access, how sign-in is protected, where mail goes and what you are paying for.
Licences, accounts, security settings and the day to day of running a tenant.
MFA, access reviews, joiners and leavers, and devices that are managed rather than just handed out.
Whether they came from our review or somebody else's, send them over and we will tell you what we would do first and what we would leave alone.