One specific product that is very often used by public sector clients and companies, but does not always comply with all the latest security settings, is Microsoft 365. We offer an initial risk assessment in which we apply our best practice experience with Microsoft 365 and the cloud to find security gaps. In our checkup, we evaluate your current configuration of Microsoft 365 with regard to compliance issues. For this purpose, we check relevant legal provisions from the DSGVO, the BDSG and other legislation against your current configuration. The recommendations for the configurations come from various supervisory authorities, the Data Protection Conference (DSK), the European Data Protection Committee (EDSA) and from best practice approaches. In addition to checking your Microsoft 365 configuration, we also examine other obligations arising from the GDPR - including the documentation obligations for you as the data controller. As a result, we can draw up an action plan for the compliant use of Microsoft 365.