State the requirement precisely
A customer assurance question, board review, insurer request and formal certification audit can require different outputs. Provide the exact requirement where possible and identify the intended report reader. A tenant assessment can contribute evidence without satisfying the entire obligation.
Agree the working conditions
- Written authority for the scoped review
- Tenant and workload ownership, including supplier-held evidence
- Criteria, evidence period, sample approach and limitations
- Named technical and business contacts
- Confidentiality, data handling, access expiry and document review
- Factual review, reporting expectations and closure arrangements
Keep the conclusion within the evidence
The service does not itself issue ISO certification, SOC 2 attestation, a statutory opinion or DORA TLPT results. Active testing and incident response use separately agreed methods and authorisation.
Prepare your audit request
Use the Microsoft 365 Audit Planner for a licence-aware starting scope, or the detailed scoping assistant. Review the brief and send it with your enquiry. You can attach your NDA or RFP in the contact form.
