What's included
Security posture analysis
Microsoft Defender for Cloud — Secure Score, active alerts, Attack Paths
Cost evaluation
Spend distribution per subscription, waste identification, RI/Savings Plans opportunities
Governance audit
Management Groups, Azure Policy, naming conventions, geographic distribution
IAM analysis
Owner/Contributor roles, global admins, Entra ID, MFA policies
Reliability check
VM backup coverage, High Availability, Azure service retirement deadlines
Observability audit
Log Analytics workspaces, log retention, resources without Diagnostic Settings
Orphaned resource identification
Unused disks, public IPs, NICs, zombie subscriptions
Full resource inventory
VM fleet, region distribution, registered enterprise applications
Deliverables
Complete technical report
Detailed findings across 6 pillars, quantified risks, documented evidence
P1/P2/P3 remediation plan
Prioritized roadmap: immediate (1–2 wks), short-term (3–6 wks), strategic (7–12 wks)
Executive summary
1–2 page document + PowerPoint presentation for management
Debriefing session
1–2 hours remote (Teams) or on-site — findings walkthrough and action plan
IaC templates (optional)
Terraform / Bicep templates for P1 remediations upon request
Ready to see where you stand?
Book a free 30-minute call to scope the assessment for your environment.
Book a Free Strategy Call