NIS2 Microsoft 365 Checklist
Microsoft 365 and Entra provide many signals relevant to effective cyber risk management. This checklist is not NIS2 certification; it is a technical starting point.
Identity and MFA
Inventory privileged roles, legacy authentication, MFA coverage, break-glass accounts and Conditional Access design. Verify that privileged access is technically protected and periodically recertified.
Joiner-Mover-Leaver
Check how quickly departed users are disabled, how role changes are approved and whether guest accounts become stale.
Devices and endpoints
Identify managed/unmanaged devices, compliance status, EDR coverage and relevant security policies.
Logging and detection
Define which signals are collected centrally, how long they remain available, who monitors alerts and how escalation works.
Backup and recovery
Backups are only credible when restores are tested and RTO/RPO assumptions are realistic.