The Problem
Most Birmingham businesses are paying for M365 security they never turned on
Microsoft 365 Business Premium includes Intune, Microsoft Defender for Business, Entra ID P1, and Conditional Access. For most manufacturing businesses, logistics firms, and professional services companies in Birmingham, those tools came with the licence and have never been configured. The subscription is active, the controls are available, and the tenant is still running on default settings.
Birmingham's diverse business community increasingly relies on Microsoft 365, often without the in-house expertise to configure it securely. A one-off setup engagement gives you the baseline without the cost of a full-time security resource.
A one-off engagement closes the gap without the cost of a full-time hire or an ongoing managed service contract. You get the configuration done, the documentation to maintain it, and a tenant that is actually using what you are already paying for.
Services
What I do for Birmingham businesses
All work is carried out remotely. Most Birmingham clients are fully set up without a single on-site visit.
M365 Tenant Hardening
Full security configuration of your Microsoft 365 tenant. Conditional Access policies, MFA enforcement, legacy authentication blocked, admin account hygiene, and audit logging. Based on the Microsoft Secure Score baseline and Cyber Essentials requirements.
Intune Device Management
Enrolment of Windows, iOS, and Android devices into Microsoft Intune. Compliance policies, BitLocker enforcement, Windows Update rings, app deployment, and device configuration profiles. Full runbook included on handover.
Conditional Access Framework
Design and deployment of a Conditional Access policy set covering MFA for all users, legacy authentication block, device compliance requirements, risk-based policies, and admin account protection. Tested in report-only mode before enforcement.
Cyber Essentials Readiness
Gap analysis against all five Cyber Essentials technical controls using your existing Microsoft 365 tools. Covers firewalls, secure configuration, access control, malware protection, and patch management. Written report with prioritised remediation steps.
Microsoft Defender Setup
Onboarding devices to Microsoft Defender for Endpoint via Intune. EDR policies, Attack Surface Reduction rules, anti-phishing and Safe Links configuration for Defender for Office 365. Alert configuration and Live Response setup.
M365 Security Audit
A review of your current Microsoft 365 configuration. SPF, DKIM, DMARC, Conditional Access coverage, Intune enrolment state, Secure Score, sharing settings, external access controls, and admin account hygiene. Delivered as a written gap report.
Packages
Fixed-price packages for Birmingham businesses
No day-rate, no scope creep. Every engagement starts with a written scope of work confirming exactly what is included, the timeline, and the fixed price before any work begins.
Starter
M365 Security Audit
£349 fixed price
Delivered in 3-5 working days
- Full M365 and Intune configuration review
- Email authentication check (SPF, DKIM, DMARC)
- Conditional Access coverage assessment
- Device compliance posture review
- Secure Score analysis
- Gap analysis vs Cyber Essentials
- Written report with prioritised recommendations
Most popular
M365 Security Deployment
£999 fixed price
Delivered in 5-7 working days
- Everything in the audit package
- Conditional Access policy framework deployed
- MFA enforced for all users
- Legacy authentication blocked
- Email authentication fully configured
- Defender for Office 365 anti-phishing policies
- Admin account hygiene and PIM guidance
- Cyber Essentials ready on completion
- Full technical documentation
Full deployment
M365 + Intune Full Setup
£2,200 fixed price
Delivered in 10-14 working days
- Everything in the security deployment
- Full Intune device enrolment (Windows, iOS, Android)
- Device compliance policies and BitLocker
- Windows Update rings configured
- Microsoft Defender for Endpoint onboarded
- Attack Surface Reduction rules deployed
- App deployment and configuration profiles
- Cyber Essentials readiness checklist
- Full runbooks and technical documentation
How It Works
From first call to handover
01
Free 15-minute scoping call
A short call to understand your current setup, device count, and what you are trying to achieve. No obligation. I will tell you exactly what is missing and what it would take to fix it.
02
Written scope of work
You receive a document confirming exactly what is included, what is not, the timeline, and the fixed price. 50% deposit to begin, 50% on completion.
03
Remote configuration
All work is carried out remotely via screen share. I work directly in your tenant with delegated admin access, testing every policy in report-only mode before enforcement.
04
Handover and documentation
On completion you receive full technical documentation covering every policy deployed, how to maintain it, and what to do if something needs changing. Access is revoked and the engagement closes.
FAQ
Questions from Birmingham businesses
Do you work with businesses in Birmingham remotely?
Yes. All Microsoft 365 and Intune work is carried out remotely via screen share and Teams. There is no need for an on-site visit. I work with businesses across West Midlands including Wolverhampton, Coventry, Solihull and Sutton Coldfield, as well as clients across the wider UK.
Do I need Microsoft 365 Business Premium?
Most of the security configuration work requires Entra ID P1, which is included in Microsoft 365 Business Premium. If you are on Business Standard or below, some features will not be available. I will confirm the right licence tier during the scoping call before any work begins.
Can you help with Cyber Essentials for our Birmingham business?
Yes. The M365 Security Deployment and Full Setup packages are built around the Cyber Essentials technical controls. On completion your tenant will satisfy the firewall, secure configuration, access control, malware protection, and patch management requirements using tools already included in your Microsoft 365 licence.
How long does Intune setup take?
The full M365 and Intune setup package is delivered in 10 to 14 working days. The security deployment without Intune is 5 to 7 days. The audit is 3 to 5 days. These timelines are from receipt of a signed scope of work.
What access do you need to my tenant?
I request delegated admin access for the duration of the engagement only. All actions are taken in the Microsoft admin portals. Access is revoked on completion and confirmed in writing. No credentials or access are retained after handover.
Can I start with just the audit?
Yes. The audit is a standalone package at £349. Most clients start there to understand the gaps before committing to a full deployment. If you proceed with a deployment within 30 days of the audit, the £349 is credited against the larger package cost.
Ready to actually secure your Microsoft 365 tenant?
Book a free 15-minute call. I will review your current setup, tell you exactly what is missing, and give you a fixed price to fix it. No obligation and no sales pitch.
Book a Free Call →