FAQ: MSI Configuration Assessments for Devices, Applications, and Cloud Environments

Posted on February 20, 2025 by Brent Huston

Overview

We get a lot of questions about configuration reviews, so we built this FAQ document to help folks learn more. Here are the most common questions:

General Questions

1. What is an MSI configuration assessment?
An MSI (Managed Security Infrastructure) configuration assessment evaluates the security posture of devices, applications, and cloud environments. It ensures that configurations align with best practices, compliance requirements, and industry security standards.

2. Why do I need a configuration assessment?
Misconfigured systems are a leading cause of security breaches. An assessment helps identify vulnerabilities, enforce security controls, and reduce risk exposure by ensuring that all configurations adhere to security best practices.

3. How often should configuration assessments be performed?
Regular assessments should be conducted at least annually or whenever significant changes occur (e.g., system updates, new deployments, or security incidents). For high-risk environments, quarterly reviews may be necessary.

Scope and Coverage

4. What types of devices are assessed?
The assessment includes:
– Workstations (desktops, laptops)
– Servers (on-premise and cloud-based)
– Mobile devices (smartphones, tablets)
– Network equipment (firewalls, routers, switches)
– Security devices (IDS/IPS, SIEM, VPNs)

5. What applications are included in the assessment?
– Enterprise applications (ERP, CRM, HR systems)
– Cloud-based applications (SaaS, IaaS, PaaS)
– Web applications and APIs
– Databases
– Custom-built software

6. What cloud environments do you assess?
We assess public, private, and hybrid cloud environments, including:
– AWS, Azure, Google Cloud
– SaaS platforms (Microsoft 365, Salesforce, etc.)
– Virtualization platforms and containers (VMware, Docker, Kubernetes)

Assessment Process

7. How is the assessment conducted?
The assessment involves:
– Reviewing system configurations and settings
– Comparing configurations against security benchmarks (e.g., CIS, NIST, ISO 27001)
– Identifying misconfigurations, vulnerabilities, and security gaps
– Providing remediation recommendations

8. Do you perform automated or manual assessments?
A combination of both is used. Automated tools scan for vulnerabilities and misconfigurations, while manual analysis ensures accuracy, evaluates complex settings, and validates findings.

9. Will the assessment impact business operations?
No. The assessment is non-intrusive and performed with minimal disruption. In cases where changes are necessary, they are recommended but not enforced during the assessment.

Security and Compliance

10. What security frameworks and compliance standards are covered?
– CIS Benchmarks
– NIST Cybersecurity Framework
– ISO 27001
– PCI DSS
– HIPAA
– SOC 2
– Cloud Security Alliance (CSA) guidelines

11. Will this help with compliance audits?
Yes. A configuration assessment ensures that security controls are in place, reducing audit findings and non-compliance risks.

Findings and Remediation

12. What happens after the assessment?
You receive a detailed report outlining:
– Identified misconfigurations and risks
– Recommended remediation steps
– Prioritized action plan for improvements

13. Do you help with remediation?
Yes. We provide guidance and support for implementing recommended changes, ensuring a secure configuration.

Cost and Scheduling

14. How much does an MSI configuration assessment cost?
Cost varies based on scope, environment size, and complexity. Contact us for a customized quote.

15. How can I schedule an assessment?
Reach out via email, phone, or our website to discuss your requirements and schedule an assessment.

* AI tools were used as a research assistant for this content.

Securing the Cloud: How MSI’s Cloud Infrastructure and Microsoft 365 Configuration Reviews Reduce Risk and Strengthen Security

Posted on February 12, 2025 by Brent Huston

Cloud platforms like AWS, Azure, and Google Cloud, alongside Microsoft 365 (M365), have become the backbone of modern business operations. While these tools offer unparalleled scalability and collaboration, they also introduce unique security challenges. Misconfigurations, weak security settings, and overlooked compliance gaps can expose sensitive data, disrupt operations, and attract attackers.

This growing complexity demands more than traditional security approaches. That’s where MSI’s Cloud and M365 Configuration Review Services come in—helping organizations identify vulnerabilities, ensure compliance, and build stronger, more resilient cloud environments.

Section 1: The Cloud Security and M365 Challenge

Common Cloud Misconfigurations

Cloud platforms offer powerful features, but misconfigurations are among the most common and dangerous risks. These missteps are often caused by default settings or poor understanding of cloud security best practices. Common issues include:

Open S3 Buckets: Exposing sensitive data to the public internet.
Overly Permissive IAM Roles: Allowing more access than necessary.
Exposed Databases: Poorly secured database instances with weak authentication.
Misconfigured Virtual Networks: Creating unintentional pathways for attackers.

M365-Specific Risks

Microsoft 365 has become a business staple, but its broad adoption also makes it a high-value target for cyberattacks. Security challenges in M365 environments include:

Weak Security Settings: Particularly in Exchange Online, SharePoint, and OneDrive.
Email Security Gaps: Misconfigured SPF, DKIM, and DMARC policies, leaving organizations vulnerable to phishing and spoofing attacks.
Overlooked Audit Logs: Missing critical insights from Teams, Power Automate, and third-party integrations.

Compliance and Governance Gaps

Cloud services and M365 present significant governance challenges. Many organizations struggle to align with security benchmarks like CIS, NIST, or regulatory requirements such as GDPR, HIPAA, and PCI-DSS. Failure to meet these standards can result in hefty fines and damaging data breaches.

Section 2: MSI’s Value Proposition

Cloud Infrastructure Configuration Review

MSI’s Cloud Configuration Review Service covers AWS, Azure, and Google Cloud environments to detect and remediate security gaps. Key elements include:

Comprehensive Cloud Assessments: Identifying security misconfigurations across compute, storage, and network services.
Database and Storage Security: Ensuring encryption, proper access controls, and minimal exposure.
Virtual Network Configurations: Implementing segmentation, secure routing, and least privilege network policies.

Microsoft 365 Security Review

MSI’s M365 Security Review takes a deep dive into your configurations to strengthen security and compliance. The process includes:

Exchange Online Review: Focus on mailbox permissions, phishing protection, and external email forwarding rules.
OneDrive & SharePoint: Evaluate sharing settings, access policies, and data governance.
Teams Security: Assess external access, retention policies, and file-sharing risks.

Identity and Access Management

Azure Active Directory (AAD) configurations are critical to security posture. MSI’s review ensures that Conditional Access Policies and Multi-Factor Authentication (MFA) are properly configured to reduce risk.

Data Loss Prevention & Compliance

Our team evaluates Data Loss Prevention (DLP) policies, ensuring they align with industry frameworks and protect sensitive data from accidental exposure.

Section 3: Reducing Risk and Ensuring Compliance

Cloud Security Framework Alignment

MSI helps organizations align with cloud security frameworks such as NIST, CIS Benchmarks, and Microsoft Secure Score to maintain a strong security posture.

Regulatory Compliance Made Easier

We tailor our recommendations to ensure compliance with regulatory standards, whether it’s HIPAA, GDPR, or PCI-DSS.

Threat Intelligence Integration

We help you leverage Microsoft’s built-in security tools, including:

Microsoft Defender for Office 365
Azure Security Center
Microsoft Cloud App Security (MCAS)

Section 4: Actionable Recommendations from MSI

Here are some practical steps we recommend during our reviews:

For Cloud Platforms

Secure cloud-native services with robust encryption and key management.
Enforce Role-Based Access Controls (RBAC).
Implement Network Segmentation to isolate sensitive resources.

For Microsoft 365

Harden email flow with SPF, DKIM, and DMARC configurations.
Optimize and continuously monitor your Microsoft Secure Score.
Deploy Advanced Threat Protection (ATP) and Conditional Access Policies for proactive defense.
Establish logging and alerting for suspicious activities in Azure AD.

Zero Trust Architecture

MSI integrates Zero Trust principles across cloud and M365 environments to minimize exposure and enforce strict access controls.

Section 5: The Risk Reduction Impact

Reduced Attack Surface

Configuration reviews significantly reduce your organization’s exposure to attacks by closing common security gaps.

Improved Incident Response Readiness

With proactive monitoring and hardening, your security team can detect and respond to incidents faster, minimizing damage.

Enhanced Operational Efficiency

By avoiding costly security incidents and achieving compliance, organizations can focus on innovation rather than constant firefighting.

Conclusion: Why Choose MSI for Cloud and M365 Security?

MSI’s proven expertise in cloud and Microsoft 365 security helps organizations reduce risk, achieve compliance, and improve operational resilience. With tailored reviews and actionable recommendations, we empower your team to stay secure in an increasingly complex digital landscape.

Contact us today to schedule a Cloud & Microsoft 365 Security Configuration Review and take the first step toward a stronger, more secure environment.

* AI tools were used as a research assistant for this content.

Apple’s PC Free Feature: Insecure But Maybe That’s a Good Thing?

Posted on February 8, 2012 by Chris Lay

At least in the case of stolen devices.

The fervor for the newest iOS for Apple was building throughout 2011, and those who utilized the Apple iPhone and iPad felt a great sense of anticipation for Apple’s Worldwide Developers Conference (WWDC). Feature speculation floated around the Internet, leading to the launch date of iOS 5. What latest and greatest features and functionality would be announced?

Rumors were laid to rest at WWDC in June 2011 as the late Steve Jobs made one of his last public appearances to promote the launch of the newest mobile iOS, available October 12, 2011. New features included iMessage and numerous integration points with Twitter, the ability to hold your iPhone like a camera and “click” with the volume button, and the ability to sync your device with iCloud. The PC Free feature finally freed iOS users from the cord, no longer requiring them to connect their device to their Mac or PC to sync photos, music and software updates.

As long as the user was sharing the same Apple ID, a photo, for example, would be uploaded to the cloud and pushed to each device running the newest iOS.

During the WWDC keynote, MicroSolved, Inc’s CEO, Brent Huston, spent considerable time on Twitter discussing the lack of built-in security for the new iOS. He made the point that each unique identifier (in this case, the Apple ID) on numerous devices would allow possibly unwanted users to see information they shouldn’t see. He used the example of a parent downloading and viewing patient medical data (such as an MRI scan) on their Apple device. Instantly, the image would upload to the cloud and be pushed to any user sharing the same Apple ID. In theory, the images would be shared with the spouse’s iPad and the daughter’s iPhone or iPod. In the case of medical data, this would pose serious HIPAA/HIPAA HITECH violations.

He shared other examples of syncing photos meant “for your eyes only,” which would be shared into the photo stream. I shuddered when I imagined how many conversations of “Where were you last night?” would happen as a result.

While the “doom and gloom” scenarios will surely play out (And they did in the case of the gentleman who used “Find my Friend” to catch a cheating spouse.), this newest feature has actually helped victims of stolen Apple devices catch kleptomaniacs.

Recently, the seamless sync feature led authorities in Hilliard, Ohio directly to thieves. During a home burglary, they stole an iPad among other items. The homeowner suddenly noticed a number of new photos in his Photo Stream — pictures of people he didn’t know or recognize. As it turned out, the iPad thieves were taking photos of themselves and unknowingly sharing their identity with the users who shared the Apple ID — including the dad who notified local police.

While this is great news in the case of the photogenic iPad snatcher, it does appear Dad didn’t have the lock feature on; which if he had, would have prevented the iPad from uploading photos to the cloud. We at MSI encourage device users to take advantage of all security features, but in this case, the father’s actions (or lack thereof) worked in his favor.

Moral of the story: educate yourself regarding your device’s safety features and utilize the GPS function when needed.

Stay safe out there!

How Cloud Computing Will Leak Into Your Enterprise

Posted on June 17, 2010 by Brent Huston

“Consumer use of the cloud”; in a phrase, is how the cloud will leak into your enterprise, whether you like it or not. Already, IT is struggling with how to manage the consumer use of devices and services in the enterprise. Skype/VoIP and WIFI were the warning shots, but the BlackBerry, iPhone, iPad and other consumer devices are the death nail for centralized IT (and IS) control.

Consumer electronics, backed by a wide array of free or low cost cloud services, are a new frontier for your organization. Services like MobileMe, DropBox, various file sharing tools and remote access services like GoToMyPC, et al. have arrived. Likely, they are in use in your environment today. Consumers use and leverage these services as a part of their increasingly de-centralized online life. Even with sites like Twitter and FaceBook growing in capability and attention, consumers grow their use, both personally and professionally of services “in the cloud”. Make no mistake, despite your controls at the corporate firewalls, consumers are using their mobile and pocket devices and a variety of these services. Unless you are searching them at the door and blocking cell phone use in your business, they are there.

This might not be “the cloud” that your server admins are worrying about. It might not represent all of the off-site system, database and other hosting tools they are focused on right now, but make no mistake, this consumer version of the cloud has all, if not more, of the same issues and concerns. Questions about your data is managed, secured and maintained all abound.

Given the “gadget posture” of most organizations and their user communities, this is not likely to be something that technical controls can adequately respond to. The consumer cloud services are too dynamic and widespread for black listing approaches to contain them. Plus, they obviously lack centralized choke points like in the old days of “network perimeter security”. The new solution, however, is familiar. Organizations must embrace policies and processes to cover these technologies and their issues. They also have to embrace education and awareness training around these topics with their user base. Those who think that denial and black listing can solve this problem are gravely mistaken. The backdoor cloud consumer movement into your organization is already present, strong and embedded. Teaching users to be focused on safe use of these services will hopefully reduce your risk, and theirs.