Understanding Microsoft 365. Evidenced, not asserted.
The guides answer the questions IT leadership, security, compliance and procurement ask before a decision: which frameworks the assessment covers, what each Microsoft 365 licence contains, which permissions the collection needs and how to read usage correctly. Every figure comes from the catalogues and registers PureTenant itself measures with.
What the assessment covers.
Every framework is stored in full — with all requirements that concern a Microsoft 365 tenant. In the assessment within the application, each can be used completely: requirements, measures, questions and evidence.
- Framework
NIS2 (German BSIG)
- requirements
- more than 150
- measures
- more than 350
- Framework
TISAX (VDA ISA)
- requirements
- more than 70
- measures
- more than 350
- Framework
ISO/IEC 27001
- requirements
- more than 90
- measures
- more than 90
- Framework
CIS Controls v8.1
- requirements
- more than 150
- measures
- more than 150
- Framework
DORA
- requirements
- more than 5
- measures
- more than 30
- Framework
SOC 2
- requirements
- more than 60
- measures
- more than 60
- Framework
BSI IT-Grundschutz
- requirements
- more than 650
- measures
- more than 950
- Framework
GDPR Art. 32 (TOMs)
- requirements
- more than 5
- measures
- more than 20
What to clarify before a decision.
Licences, permissions and measurement limits — explained from what PureTenant itself works with.
- Topic · Licences
What is in which Microsoft 365 licence?
Which service plans the common suites include and what the larger one adds.
Read - Topic · Trust
Which permissions PureTenant needs — and why.
The permissions with their type — the one named exception with write access included.
Read - Topic · Methodology
Reading licence usage correctly.
Usage, time windows and measurement limits: why “not measurable” is something other than zero.
Read
How these pages are made
The overview names the scope of each framework: rounded, counted from the catalogue PureTenant itself measures with. Chapters, measurement points and the wording of the requirements are shown by the assessment in the application. The topic pages read from Microsoft’s service plan list, from the permissions of the setup and from the methodology. When a framework is added, it appears here by itself.