Bring the information that changes the scope
You do not need a complete inventory to make an enquiry. Start with what you know and identify an owner for the unresolved questions. Keep sensitive details for the agreed secure channel.
Preparation checklist
- Tenant count and business entities; no production identifiers in the public form
- Approximate employee, guest, administrator and managed-device populations
- Licence families, mixed plans and relevant add-ons
- Workloads in use and planned Copilot or platform changes
- Cloud-only, synchronised or federated identity model
- Reason for the review and intended report audience
- Requested evidence period and records known to be unavailable
- Preferred supervised access or approved export process
- Technical owners, supplier involvement and confidentiality requirements
- Desired outputs, reporting deadline and remediation ownership
Existing tools can help
Atlant’s published Microsoft 365 auditing tools and CISA ScubaGear can support an authorised team’s preparation. Review each tool’s permissions and documentation before running it. Do not upload its report or grant tenant access through this public planner.
Prepare your audit request
Use the Microsoft 365 Audit Planner for a licence-aware starting scope, or the detailed scoping assistant. Review the brief and send it with your enquiry. You can attach your NDA or RFP in the contact form.
