9 out of 10 Enterprises Have Vulnerabilities in their Microsoft 365 Security Configurations

IT teams are struggling to reach full compliance with key security policies such as multi-factor authentication and strong passwords

Atlanta, GA — November 15, 2022 — A recently published study evaluated 1.6 million Microsoft 365 users across three continents. CoreView, the leader in Microsoft 365 Management, found that 90% of organizations had gaps in essential security protections.  Managing Microsoft 365 (M365) is complicated.  How can IT teams avoid management headaches, stay 100% compliant, and truly take control of their M365 instance? 

To find out, CoreView experts reviewed the most common problems to understand what companies are doing well and reveal gaps in IT management strategies.  

Research from the study reveals that many common security procedures are not being followed 100% of the time.  This leaves gaping holes in most organizations’ security defenses.  While most companies have strong documented security policies, the research uncovered that most aren’t being implemented consistently due to difficulties in reporting and limited IT resources:

• 90% of companies had gaps across all four key areas studied – Multi-Factor Authentication (MFA), Email Security, Password Policies, and Failed Logins
• 87% of companies have MFA disabled for some or all their admins (which are the most critical accounts to protect, due to their higher access levels)
• Only 17% of companies had strong password requirements that were being consistently followed

Overall, nearly every organization is leaving the door open for cybersecurity threats due to weak credentials, particularly for administrator accounts. 

In addition to security challenges, the study identified key areas for improvement in managing Microsoft 365 licenses as well, such as:

• The average company had 21.6% of their licenses unassigned or “sitting on the shelf.” Another 10.2% of licenses were inactive, for an average of 31.9% unused licenses
• In 17% of companies, the numbers were huge with over 10,000 licenses unassigned or inactive! These cases represent big opportunities to optimize license spend with better tools.

Overall, the study reveals that reporting challenges make security and license management incredibly difficult, leading to unnecessary risks and costs.

“The role of the IT professional is more important and complex than ever. They need to stay in perfect compliance 100% of the time, all while saving money and improving the end-user experience.” said Shawn Lankton, CEO of CoreView. “To overcome this challenge, IT professionals require solutions that help automate compliance and delegate responsibilities to ensure security and efficiency across the business.”

View the full report here.

About CoreView

CoreView stops the chaos and gets Microsoft 365 under control. The CoreView Microsoft 365 Management Platform helps IT teams get way more done, control license spend, and improve security. More than 10 million users and the world’s largest organizations rely on CoreView to delegate perfect privileges, prevent wasted licenses, and automate repetitive tasks. A Microsoft Gold Partner, CoreView is Co-Sell Prioritized and available on the Azure Marketplace. CoreView | Now It’s Under Control. For more information, please visit www.CoreView.com.

CoreView
Sadie Peterson Hattan
VP, Marketing
Phone: 770-637-5024
Email: Sadie.Peterson@CoreView.com