A written scope before a price commitment
We confirm the tenants, workloads, populations, evidence access and reporting requirements before agreeing a fee. A small single-tenant review and a hybrid multi-tenant engagement are different assignments even when both are described as a Microsoft 365 audit.
What changes the effort
- Number of tenants and separate administrative boundaries
- Workloads and connected applications selected for review
- Hybrid identity, complex exclusions and existing configuration documentation
- Availability and quality of current and historic evidence
- Required reporting audiences, framework mappings and factual review rounds
- Whether implementation or remediation validation is included
See Atlant’s published service pricing
Atlant Security publishes starting packages on its Microsoft 365 and Entra ID audit service page. Use that page for the current starting figures and conditions. A starting price is not a quote for the selections in this planner; the final scope and commercial terms require agreement.
Compare proposals using the same assumptions
Ask every provider to identify included workloads, evidence access, exclusions, deliverables, retest arrangements and additional costs. Licence purchases and remediation implementation should not be hidden inside an ambiguous audit description.
Prepare your audit request
Use the Microsoft 365 Audit Planner for a licence-aware starting scope, or the detailed scoping assistant. Review the brief and send it with your enquiry. You can attach your NDA or RFP in the contact form.
