<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>365 Audit insights</title><link>https://ms365securityaudit.com/blog/</link><description>Practical 365 Audit guidance from Atlant Security.</description><language>en</language><item><title>A Microsoft 365 security audit checklist that asks for evidence</title><link>https://ms365securityaudit.com/blog/microsoft-365-security-audit-checklist/</link><guid>https://ms365securityaudit.com/blog/microsoft-365-security-audit-checklist/</guid><description>Prepare a tenant review around populations, exceptions, evidence and owners, rather than a list of enabled features.</description><pubDate>Tue, 06 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Why Microsoft Secure Score is a starting point for an audit</title><link>https://ms365securityaudit.com/blog/microsoft-secure-score-audit-difference/</link><guid>https://ms365securityaudit.com/blog/microsoft-secure-score-audit-difference/</guid><description>Use Secure Score constructively without treating a percentage as evidence of tenant-wide protection.</description><pubDate>Tue, 06 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Conditional Access: audit the exclusions, not just the policy names</title><link>https://ms365securityaudit.com/blog/conditional-access-exclusions-review/</link><guid>https://ms365securityaudit.com/blog/conditional-access-exclusions-review/</guid><description>Review policy coverage, privileged identities, emergency access and licence dependencies in Entra ID.</description><pubDate>Tue, 06 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Before Copilot: review the information people can already reach</title><link>https://ms365securityaudit.com/blog/copilot-readiness-sharing-permissions/</link><guid>https://ms365securityaudit.com/blog/copilot-readiness-sharing-permissions/</guid><description>Prepare for Microsoft 365 Copilot by examining permissions, oversharing and ownership of sensitive locations.</description><pubDate>Tue, 06 Oct 2026 00:00:00 GMT</pubDate></item><item><title>OAuth app permissions: the access a user-MFA review can miss</title><link>https://ms365securityaudit.com/blog/oauth-app-consent-security-review/</link><guid>https://ms365securityaudit.com/blog/oauth-app-consent-security-review/</guid><description>Inventory enterprise applications, delegated permissions, application permissions and consent ownership.</description><pubDate>Tue, 06 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Business Premium, E3 or E5: make the audit licence-aware</title><link>https://ms365securityaudit.com/blog/business-premium-e3-e5-audit-scope/</link><guid>https://ms365securityaudit.com/blog/business-premium-e3-e5-audit-scope/</guid><description>Avoid recommendations that assume unavailable features; map entitlements to the controls and evidence you need.</description><pubDate>Tue, 06 Oct 2026 00:00:00 GMT</pubDate></item></channel></rss>