Security
Assessment is for the firm. Practice is for people.
Assessment
Twelve questions an owner can answer without opening the admin center. Yes, no, or not sure. The result is a gap list, not a grade.
Practice
Ten situations — invoices, MFA prompts, lookalike sites. Immediate right or wrong, and one sentence of why. This does not mean the company is secure.
If you want these controls implemented rather than scored, talk with us. The how-to is in Security insights and Microsoft 365.