MICROSOFT 365 SECURITY FOR CHARITIES
Microsoft 365 Security for Charities: Executive Guide
Understand the 10 Microsoft 365 security controls every charity should consider and quickly assess whether each area is In Place, Partial or Not Sure.
This practical Executive Guide helps charity leaders understand their Microsoft 365 security posture, identify potential gaps and decide what needs attention next.
Free Executive Guide • 10 Security Controls • Practical Self-Assessment
What will you learn from the Executive Guide?
The guide gives charity leaders a practical overview of 10 Microsoft 365 security controls that can help reduce cyber risk, protect sensitive information and strengthen your organisation’s security posture.
01 / Understand the 10 Controls
See the key areas charities should consider across identity, devices, email, data protection and governance.
02 / Assess Where You Stand
Use the simple In Place, Partial or Not Sure checklist to quickly identify areas that may need further review.
03 / Prioritise What Happens Next
Turn the results into practical priorities for strengthening your Microsoft 365 security.
What are the 10 Microsoft 365 security controls for charities?
The Executive Guide covers 10 practical security controls across identity, access, email, devices, data protection and governance. Together, they provide a structured way to review how your charity is protecting its Microsoft 365 environment.
Add an extra layer of protection to user accounts.
Control access based on users, devices, locations and risk.
Strengthen protection against cyber threats.
Measure your current security posture and identify improvements.
Identify and respond to risky users and sign-in activity.
Reduce the risk from phishing and malicious email.
Protect laptops, desktops and other devices accessing charity data.
Protect critical data and maintain a clear recovery process.
Help prevent sensitive information being shared or exposed inappropriately.
Control access, sharing and information across collaboration environments.
How does your charity compare?
Use the Executive Guide to review each of the 10 controls and give your organisation one of three simple ratings:
✓ IN PLACE
The control is implemented, configured and actively managed.
◐ PARTIAL
Some elements are in place, but there may be gaps or improvements required.
? NOT SURE
You’re unsure whether the control is configured or being actively managed.
Several Partial or Not Sure answers?
That doesn’t automatically mean your Microsoft 365 environment is insecure. It does highlight the areas worth reviewing and prioritising.
Microsoft 365 security guidance built for charities
Bunker helps UK charities manage, secure and improve their Microsoft 365 environments. Our approach combines day-to-day IT expertise with cyber security, data protection and practical technology guidance.
ISO 27001 Certified
Information security built around recognised standards.
Cyber Essentials Plus Certified
Independently verified cyber security controls.
Microsoft Solutions Partner
Microsoft expertise across modern workplace technology.
Supporting Charities Since 2010
Practical experience supporting charities and organisations across the UK.
GO BEYOND THE EXECUTIVE GUIDE
Explore the Complete Microsoft 365 Security Framework for Charities
The Executive Guide provides the overview. The complete Bunker Microsoft 365 Security Framework goes further, helping charity leaders understand the security areas that should be reviewed across their Microsoft 365 environment.
The complete framework covers:
- Identity — securing users and managing access
- Devices — protecting endpoints that access charity data
- Email — reducing phishing and email-based threats
- Data Protection — protecting, backing up and governing information
- Permissions — controlling access and reducing unnecessary exposure
- Governance — continuously reviewing and improving security
