Security Configuration Review
Provides an evaluation of the security configurations of an organization’s network, systems, and cloud applications.
Strengthen your security posture across firewall, cloud & Microsoft 365
GraVoc’s Security Configuration Review services assess the security of your firewalls, cloud environments, and Microsoft 365 tenant to identify misconfigurations that could increase risk.
Our experts review firewall settings, Microsoft Azure, AWS and Google Cloud configurations, as well as Microsoft 365 security, identity, access, compliance, and collaboration controls against industry best practices.
The result is a clear understanding of your security posture, prioritized recommendations, and actionable steps to reduce risk and strengthen your overall cybersecurity defenses.
Benefits of security configuration review:
Identify and fix gaps in your network and cloud security configurations
Secure your network perimeter and mitigate risk exposure
Protect against network security breaches
Improve your overall security posture
Cloud Configuration Review
Our cloud configuration review includes a detailed vulnerability assessment of your Azure, Amazon Web Services (AWS), or Google Cloud Platform (GCP) configurations. Our team uses a combination of automated tools and manual validation testing to capture and fix security weaknesses in your cloud infrastructure to reduce overall risk exposure to your organization.
As part of our cloud configuration review’s preliminary threat assessment, our team will examine your cloud environment and security controls.
A few of the steps included in this assessment are:
- Search for publicly available information on target that may be useful to an attacker
- Check against OWASP Top 10 and SANS Top 20 for potential avenues of attack
- Perform configuration testing
- Check for potential backdoors, malware, and inadequate malware protection
- Review access control lists
- Assess configuration of all cloud service components in use for compliance with industry standards and security best practices
At the end of the cloud configuration review, our team will also provide a report with recommendations for remediation.
Firewall Configuration Review
Our firewall configuration review evaluates your firewall’s rules to determine security gaps in the device’s ability to regulate traffic and block malicious activity. Our team performs a vulnerability scan and in-depth review of your organization’s firewall configuration.
As part of this process, we assess the following components:
- Operating system and firmware
- General configuration and policy settings
- Existing rulesets and effectiveness
- Existing ruleset documentation
- Event logging and monitoring
Microsoft 365 Configuration Review
Our Microsoft 365 security configuration review provides an independent and objective assessment of your Microsoft 365 environment, security controls, and cloud services.
Using guidance from Microsoft, CIS Benchmarks, CISA recommendations, and recognized industry best practices, our team evaluates your tenant configuration to identify security gaps, excessive permissions, misconfigurations, and
opportunities to strengthen your overall security posture.
As part of this process, we assess the following components:
- Entra ID, MFA, passwordless authentication, and privileged access
- Conditional Access, risk-based protections, and least-privilege access
- Purview, DLP, retention, sensitivity labels, and governance controls
- Exchange, Teams, SharePoint, OneDrive, Defender, and email security
- Secure Score, monitoring, Copilot readiness, and application security
Our security configuration review process
We define the scope, perform automated and manual testing, then deliver prioritized recommendations for remediation.
Discovery
Gather information on network, cloud configurations and perform vulnerability assessments.
Analysis
Review findings from the discovery phase to identify and validate potential misconfigurations and control gaps.
Reporting
Deliver a comprehensive summary report outlining the identified security misconfigurations along with recommendations for corrective action.
10+
Information security Certificates
Certified experts
At GraVoc, one of our core values is Adapt. We embrace this by continually advancing our knowledge and staying ahead of emerging technologies, threats, and solutions through ongoing education and certification. With over 40 certificates spanning security and technology, our proven expertise helps strengthen and protect your organization.