Almost half of organizations don't use all of Microsoft 365's features

The thing about integrated office suites is that inevitably you don't need all of the features they provide, or at least you use some of them less than others.

New research from managed services provider Ensono shows that 83 percent of enterprises say Microsoft 365 is an invaluable part of their business operations. However, almost half aren't using all of the features available.

More significantly a worrying proportion are neglecting the cybersecurity features available, leaving them open to vulnerabilities. The survey shows that 38 percent are not using multi-factor authentication (MFA), only 43 percent have Conditional Access Controls (CAC) in place and 46 percent do not have data loss prevention (DLP) or data classification configured.

Of those surveyed that reported a Microsoft 365-related breach, 42 percent were linked to files being shared with external parties and 37 percent were due to the impersonation of a compromised account. The correct implementation of MFA and CAC could offer better protection against these incidents.

Simon Ratcliffe, principal consultant at Ensono, says:

While Microsoft 365 has proven invaluable for enterprises undergoing rapid transformation, not all companies have set up the platform in an optimal manner for their business. Microsoft 365 licensing inefficiencies remain a persistent problem in the market today, with firms creating additional costs by investing in third party tools already available as part of their Microsoft 365 package. With optimization and the implementation of key security features, the platform can provide a better and more secure experience for its users.

However, there is no one-size-fits-all solution for every business. Each organization is unique, and therefore security requirements and the needs of users will vary. When reviewing an organization's Microsoft 365 configuration, it is essential that the process is led every step of the way by the business context. Following a review, the Microsoft 365 environment can be optimized for specific business requirements, including maximizing the use of Microsoft 365 features to match the needs of the organization, and creating a security set-up tailored to the cybersecurity posture of the business.

You can read more on the Ensono blog.

Image credit: AndrewLozovyi/depositphotos.com