Security and Governance

From Tenant review to develop your organization´s governance strategy

Companies need to know about security and governance in their Microsoft 365 tenant. Therefore, we support you from the conception and approach to the solution of technically and organizationally necessary changes around Microsoft Security. We help you with best practices on effectively using Microsoft 365 and Azure Advanced Security Scenarios in your organization.

We advise you on the necessity and approach to integrating Microsoft Cloud Security features into your security concept and providing you with deeper insights into a security analysis key elements. Besides, we advise you on all aspects of security management, data loss prevention, advanced data governance, and DSGVO (General Data Protection Regulation). Based on our years of experience, we are happy to advise you on your enterprise-wide security and governance implementation. Benefit from our “atwork Blueprints” with checklists, rules, and other templates to use your corporate IT in a controlled and effective way.


We support you in securing your new or existing Microsoft 365 tenant. In most cases, we start from the M365 Security Score, which is a measure of your organization’s security situation. The goal is to protect your organization and your data from internal and external threats by following score recommendations. Through a central dashboard in the M365 Security Center, your organization can monitor and continuously work on the security of M365 identities, apps, and devices.

As a foundation, we use the Cloud Adoption Framework (CAF) to help us with cloud adoption and provide guidance for each method.

Also, use M365 Defender. M365 Defender is a unified defense suite for organizations before and after an attack. With the integrated M365 Defender solution, your security professionals can piece together the threat signals each of these products receives and determine the full scope and impact of the threat.

Alongside this, you have the option to protect your business with Azure Security Center. This is a tool for managing your security status and protecting against threats.


In general, IT governance encompasses a set of policies, roles, responsibilities, and processes that enable an organization’s business units and IT teams to make decisions together and ensure a successful and sustainable digital workplace.

In technical applications, governance is implemented with an IT strategy in permissions, policies, rules, monitoring, and auditing.

Leverage Microsoft Information Governance (MIG) capabilities to manage your data for compliance with corporate or regulatory requirements.

Governance exists in M365 and Microsoft Azure for a wide variety of topics and services), such as:

  • Business Continuity
  • Power Platform Governance
  • Teams/Groups Governance
  • SharePoint Governance
  • Adoption & Change Management (ACM)
  • Identity & Access Management (+ guests)
  • Stream Governance (+ live events)
  • Information Lifecycle Management
  • Azure Blueprints
  • Azure Management Groups and Subscription Management
  • Compliance with ISO27001 standards and much more.

This is where our atwork Governance Toolkit 365 comes in, in particular, covering compliance across multiple workloads and providing self-services for users. Our Governance Toolkit 365 runs as a SaaS and automatically requests usage data from M365 services. The tool provides summarized and detailed information for custom users and administrators. The service supports custom workflows such as provisioning a team or group and inviting guest users. The toolkit comes with a bot that allows end-users to retrieve governance data and use self-services easily.

We offer business process mapping and integration, monitoring, alerting, and auditing/reporting based on your requirements.

Please contact us for more information.

At a glance


Security and Governance


Develop your organization´s governance strategy
Secure your M365 tenant


Microsoft 365



Go to top

Find latest news and know-how about Microsoft, technology, cloud and more.