The Engineer's M365 Compliance Cheat Sheet
A free guide from Veri-Tech, Inc. (veri-tech.net)

================================================================================

What's in this bundle
---------------------

  00-cheat-sheet.pdf
    The cheat sheet. Twelve high-impact Microsoft 365 controls, ranked by
    risk-reduction-per-minute, with a 60-second fix for each.

  runbooks/01-mfa-for-all-users.pdf  ...  runbooks/12-teams-third-party-apps.pdf
    Twelve full remediation runbooks, one per control. Each runbook covers:
    overview, framework compliance mapping (CIS / CISA / NIST / ISO 27001 /
    SOC 2 / HIPAA / GDPR / NIST CSF / 405D), prerequisites, what the control
    checks, GUI walkthrough, PowerShell / Graph API path, automated
    remediation path, verification, rollback procedure, and required
    permissions.

These runbooks were not hand-written or template-filled. They were generated
by Veri-Tech's runbook engine, the same engine that produces customer
runbooks on demand against any of 548 controls across 12 frameworks. What you
have here is twelve. What customers get is on-demand generation against their
own tenant, with their own findings folded in.

================================================================================

How to use this
---------------

1. Open 00-cheat-sheet.pdf first. Pick the controls that look like gaps in
   your tenant.

2. Open the matching runbook for each. Pick the option that fits your tooling
   (admin portal, PowerShell, or the Veri-Tech automated path).

3. Run the verification step. Confirm the control is passing.

4. Move to the next.

================================================================================

When you've worked through a few of these and want the rest of the 548
controls automated, three places to go next:

  veri-tech.net/compare    See how Veri-Tech compares to alternatives.
  veri-tech.net/demo       Walk through Veri-Guard, Veri-Tune, Veri-Vault, and
                           Veri-Docs without giving us a credit card.
  veri-tech.net/book       Talk to William directly. 30 minutes, no sales team.

================================================================================

Engineers shouldn't also be the audit team.

Veri-Tech, Inc.  Veteran-owned. Indiana. Founded 2026.

Framework references are nominative. CIS Microsoft 365 Foundations Benchmarks
are (c) Center for Internet Security, Inc. ISO/IEC 27001:2022 is (c) ISO. SOC 2
Trust Services Criteria are (c) AICPA. Veri-Tech is not affiliated with or
endorsed by these organizations; framework references are nominative. See
publishers for authoritative control text.
