NIS2 evidence from the Microsoft stack you already operate.
We start where technical reality already exists: Entra, Microsoft 365 and Azure. Oxygenn is designed to translate existing signals into security assurance rather than replace Microsoft tooling.
Microsoft Tenant
7 findings
Entra ID
Privileged roles, identity hygiene, authentication, Conditional Access and lifecycle signals.
Microsoft 365
Security configuration, user/device context, collaboration risks and evidence sources.
Azure
Security posture, policy signals, resource exposure, logging and technical controls.
Privileged access as an assurance domain
Privileged access combines identity inventory, roles, least privilege, time-bound permissions, strong authentication, administrative separation, access reviews, approved exceptions and traceable change history. Assurance evaluates observed state against documented control criteria and keeps evidence, deviations and remediation historically traceable.