Research Microsoft "Security Assessments" capabilities

[schrolla]

In a separate engagement with Microsoft, we learned about a feature of Azure that does "security assessments" of various MSFT products, including:

• AD
• Azure AD
• Exchange Online
• SPO

Here is the AAD one: https://learn.microsoft.com/en-us/services-hub/health/getting-started-azuread?source=recommendations

It would be good for us to evaluate these tools and the degree to which they overlap with our recommendations.

[schrolla]

Possible future exploration activity, but current documentation does not appear to include a list of possible recommendations for each product assessment. May need to contact Microsoft to see what those are to evaluate overlap.

[schrolla]

@mitchelbaker-cisa Double check if this assessment is still something to pursue.