--- title: Quick Guide to Office 365 Security Monitoring description: For many organisations, Office 365 is their first foray into the world of cloud. That brings unique advantages – but unique challenges too. image: https://blog.grantmcgregor.co.uk/hubfs/O365.png --- [![Grant McGregor](https://blog.grantmcgregor.co.uk/hubfs/GRMC_blue_logo.svg "Grant McGregor")](https://www.grantmcgregor.co.uk/) - [Home](https://grantmcgregor.co.uk/) - About Us - [Our Story](https://grantmcgregor.co.uk/about-us/our-story) - [Meet the Team](https://grantmcgregor.co.uk/about-us/meet-the-team) - [Certifications](https://grantmcgregor.co.uk/about-us/certifications) - [Careers](https://grantmcgregor.co.uk/about-us/careers) - IT Support Services - [IT Support Services](https://grantmcgregor.co.uk/it-support-services) - [People Centric Support](https://grantmcgregor.co.uk/it-support-services/people-centric-support) - [Enhanced Security Service](https://grantmcgregor.co.uk/it-support-services/enhanced-security-service) - Professional IT Services - [Professional IT Services](https://grantmcgregor.co.uk/professional-it-services) - [Microsoft 365](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-business-premium) - [Microsoft Copilot](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-copilot) - [AI Adoption Services](https://grantmcgregor.co.uk/ai-adoption-services) - [Microsoft Azure](https://grantmcgregor.co.uk/professional-it-services/microsoft-azure) - [MDR](https://blog.grantmcgregor.co.uk/mdr-vs-soc-cyber-security-defence) - [Microsoft Teams Phone](https://grantmcgregor.co.uk/professional-it-services/microsoft-teams-phone) - [KnowBe4](https://grantmcgregor.co.uk/professional-it-services/knowbe4) - [DMARC](https://grantmcgregor.co.uk/professional-it-services/dmarc) - [Enclave Networks](https://grantmcgregor.co.uk/professional-it-services/enclave-networks) - [Cyber Security](https://grantmcgregor.co.uk/cyber-security) - Knowledge Hub - [Case Studies](https://grantmcgregor.co.uk/knowledge-hub/case-studies) - [Testimonials](https://grantmcgregor.co.uk/knowledge-hub/success-stories) - [Blog](https://grantmcgregor.co.uk/knowledge-hub/blog) - [Podcast](https://grantmcgregor.co.uk/knowledge-hub/podcast) - [Client Area](https://grantmcgregor.co.uk/client-area) - [Contact us](https://grantmcgregor.co.uk/contact-us) - [Home](https://grantmcgregor.co.uk/) - About Us - [Our Story](https://grantmcgregor.co.uk/about-us/our-story) - [Meet the Team](https://grantmcgregor.co.uk/about-us/meet-the-team) - [Certifications](https://grantmcgregor.co.uk/about-us/certifications) - [Careers](https://grantmcgregor.co.uk/about-us/careers) - IT Support Services - [IT Support Services](https://grantmcgregor.co.uk/it-support-services) - [People Centric Support](https://grantmcgregor.co.uk/it-support-services/people-centric-support) - [Enhanced Security Service](https://grantmcgregor.co.uk/it-support-services/enhanced-security-service) - Professional IT Services - [Professional IT Services](https://grantmcgregor.co.uk/professional-it-services) - [Microsoft 365](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-business-premium) - [Microsoft Copilot](https://grantmcgregor.co.uk/professional-it-services/microsoft-365-copilot) - [AI Adoption Services](https://grantmcgregor.co.uk/ai-adoption-services) - [Microsoft Azure](https://grantmcgregor.co.uk/professional-it-services/microsoft-azure) - [MDR](https://blog.grantmcgregor.co.uk/mdr-vs-soc-cyber-security-defence) - [Microsoft Teams Phone](https://grantmcgregor.co.uk/professional-it-services/microsoft-teams-phone) - [KnowBe4](https://grantmcgregor.co.uk/professional-it-services/knowbe4) - [DMARC](https://grantmcgregor.co.uk/professional-it-services/dmarc) - [Enclave Networks](https://grantmcgregor.co.uk/professional-it-services/enclave-networks) - [Cyber Security](https://grantmcgregor.co.uk/cyber-security) - Knowledge Hub - [Case Studies](https://grantmcgregor.co.uk/knowledge-hub/case-studies) - [Testimonials](https://grantmcgregor.co.uk/knowledge-hub/success-stories) - [Blog](https://grantmcgregor.co.uk/knowledge-hub/blog) - [Podcast](https://grantmcgregor.co.uk/knowledge-hub/podcast) - [Client Area](https://grantmcgregor.co.uk/client-area) - [Contact us](https://grantmcgregor.co.uk/contact-us) [Contact Us](https://grantmcgregor.co.uk/contact-us) [Back to main](https://grantmcgregor.co.uk/knowledge-hub/blog) Business News # Quick Guide to Office 365 Security Monitoring Grant McGregor Team 3 February 2020 • 3 min read ![](https://blog.grantmcgregor.co.uk/hubfs/O365.png) **For many organisations, Office 365 is their first foray into the world of cloud. That brings unique advantages – but unique challenges too. In this article, the Grant McGregor team talks you through the essentials of Office 365 security.** Office 365 is now the most widely used cloud application suite. Worldwide, it has more than 100 million active monthly users. It should come as no surprise, then, that it is also a favourite of criminals. The [Vade Secure Phishers’ Favourites report](https://www.vadesecure.com/en/phishers-favorites-q2-2019/) for Q2 2019 found that Microsoft is the most impersonated brand in phishing attacks – for the fifth quarter running. ## Why is Office 365 so attractive to criminals? One reason for this is the scope of the potential target base, of course. But another, more compelling reason, is the potential lucrativeness of Office 365 credentials. The credentials of one user offers a single entry point to the [entire Office 365 suite](https://www.microsoft.com/en-gb/security/business) to which they have access – perfect for launching further phishing attacks and for conducting multi-phased attacks using compromised accounts. The Vade Secure survey warns that cybercriminals will often pull code directly from the legitimate website when creating spoof Office 365 login pages. This makes it practically impossible for users to tell the difference between the site the criminals are using to harvest credentials and the real login page. Furthermore, Vade research found that many Microsoft phishing pages referred users to legitimate Microsoft pages once they had captured the login credentials, making it doubly difficult for users to spot that there was something amiss. ## What can you do to protect your Office 365 deployment and users? Monitoring is an essential part of protecting your Office 365 deployment and users. Standard Microsoft tools make it easy to monitor a range of activities. [The essential things you or your IT provider should be monitoring include](https://www.grantmcgregor.co.uk/cyber-security/safer-data-and-access): • User access • Administrator access controls • File access and sharing • Ensure you have Office 365 policies in place You should also ensure you include the use of [multi-factor authentication](https://www.grantmcgregor.co.uk/2019/doubling-up-why-two-factor-authentication-is-your-next-step-in-digital-security/) and that users are briefed on [good password security](https://www.grantmcgregor.co.uk/2019/the-new-rules-for-passwords-in-2019/) as well as being trained in general security awareness. ## Advanced monitoring that you should be undertaking We know that once malicious actors have got a toehold into your network, their next step will be to seek greater access. Often, this comes in the form of seeking administrator privileges for the user whose credentials they’ve managed to swipe. For this reason, you should be monitoring all changes to administrator rights. Ideally, you should be working on the principle of “least privilege”. Simply put, this means ensuring that each user has the absolute minimum rights necessary for them to be able to do their job. Furthermore, you should employ separate email filtering as, whilst O365 is an excellent email platform, it’s not a dedicated security tool. If you’d like advice about moving to Office 365 or which tools can help support more detailed security monitoring, the Grant McGregor team can assist. **For further advice, contact our team on: 0808 164 4142** Office 365 is a fantastic productivity suite with many great features. It’s easily scalable, cost effective and doesn’t require infrastructure on site. However, don’t let Office 365 become your organisation’s security weakness. Image credit: dennizn / Shutterstock.com Grant McGregor Team 3 February 2020 • 3 min read ## Recent Posts ![](https://blog.grantmcgregor.co.uk/hubfs/Shadow%20AI%20-%20Is%20Your%20Business%20Ready%20for%20AI%20Adoption.png) ### Shadow AI: Is Your Business Ready for AI Adoption? Understand shadow AI's impact on your business. Discover how to assess risks, improve processes, and adopt AI securely w... [Read More](https://blog.grantmcgregor.co.uk/shadow-ai-is-your-business-ready-for-ai-adoption) ![Our Net Zero Target for 2040 - What Can We Change](https://blog.grantmcgregor.co.uk/hubfs/Our%20Net%20Zero%20Target%20for%202040%20-%20What%20Can%20We%20Change.png) ### Our Net Zero Target for 2040: What Can We Change? From company vehicles and travel to suppliers and technology, see how Grant McGregor is working towards its net zero tar... [Read More](https://blog.grantmcgregor.co.uk/our-net-zero-target-for-2040-what-can-we-change) ![](https://blog.grantmcgregor.co.uk/hubfs/What%20Is%20Penetration%20Testing%3F%20A%20Guide%20for%20Businesses.png) ### What Is Penetration Testing? A Guide for Businesses Learn what penetration testing is, how it works, what the report should include and when your business should consider a... [Read More](https://blog.grantmcgregor.co.uk/what-is-penetration-testing-a-guide-for-businesses) ![Grant McGregor named 2026 Top Managed Service Provider](https://blog.grantmcgregor.co.uk/hubfs/Social/MSP%20501%202026%20Winner.png) ### Grant McGregor Recognised as a Leading Global MSP in the 2026 MSP 501 Grant McGregor has been named a Top Global Managed Service Provider in the 2026 MSP 501, ranking #1 Scotland-based MSP a... [Read More](https://blog.grantmcgregor.co.uk/grant-mcgregor-recognised-as-a-leading-global-msp-in-the-2026-msp-501) Union ## Empower your business with secure, expert-led solutions. Talk to us about people-focused technology that drives results. [Start a conversation](https://grantmcgregor.co.uk/contact-us) ![](https://blog.grantmcgregor.co.uk/hubfs/Woman%20in%20White%20longsleeve%20polo.png) ![Divider Footer](https://blog.grantmcgregor.co.uk/hubfs/footer.svg) ![GrantMcGeregor Logo White](https://blog.grantmcgregor.co.uk/hubfs/McGregor%20Theme%20Assets/GRMC_white_logo-cropped.svg "GrantMcGeregor Logo White") Premium IT Services Tailored for Leading Brands [Follow us on LinkedIn](https://www.linkedin.com/company/grant-mcgregor-ltd/) [Follow us on Facebook](https://www.youtube.com/itgrantmcgregor) [Follow us on Facebook](https://www.facebook.com/grantmcgregorltd/) [Follow us on Twitter](https://x.com/GrantMcGregorIT) Quick Links - [Home](https://grantmcgregor.co.uk) - [About us](https://grantmcgregor.co.uk/about-us/our-story) - [Knowledge Hub](https://grantmcgregor.co.uk/knowledge-hub/blog) - [Contact us](https://grantmcgregor.co.uk/contact-us) Services - [People Centric Support](https://grantmcgregor.co.uk/it-support-services/people-centric-support) - [Enhanced Security Service](https://grantmcgregor.co.uk/it-support-services/enhanced-security-service) - [Professional IT Services](https://grantmcgregor.co.uk/professional-it-services) - [Cyber Security](https://grantmcgregor.co.uk/cyber-security) Edinburgh – Chesterfield ![Phone icon](https://blog.grantmcgregor.co.uk/hubfs/raw_assets/public/GrandMcGregor_climb/images/tel.png "Phone icon") [0131 603 7910](tel:+441316037910) ![Email icon](https://blog.grantmcgregor.co.uk/hubfs/raw_assets/public/GrandMcGregor_climb/images/mail.png "Email icon") [info@grantmcgregor.co.uk](mailto:info@grantmcgregor.co.uk) ![Location icon](https://blog.grantmcgregor.co.uk/hubfs/raw_assets/public/GrandMcGregor_climb/images/loc.png "Location icon") **Main Office:** The Merchants' Hall, 22 Hanover St, Edinburgh EH2 2EP © 2026 Grant McGregor. All rights reserved. [Privacy and Cookie Policy](https://blog.grantmcgregor.co.uk/hubfs/UsefulDownloads/Policies/GRMC-SEC-Privacy-and-Cookie-Policy.pdf) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Grant McGregor Team", "url" : "https://blog.grantmcgregor.co.uk/author/grmc-team" }, "dateModified" : "2022-11-14T14:35:49.143Z", "datePublished" : "2020-02-03T08:30:00.000Z", "headline" : "Quick Guide to Office 365 Security Monitoring", "image" : [ "https://blog.grantmcgregor.co.uk/hubfs/O365.png" ], "mainEntityOfPage" : { "@id" : "https://blog.grantmcgregor.co.uk/2020/quick-guide-to-office-365-security-monitoring", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.grantmcgregor.co.uk/hubfs/GRMC_blue_logo.svg" }, "name" : "Grant McGregor" } } ``` ```json { "@context" : "https://schema.org", "@id" : "https://grantmcgregor.co.uk/", "@type" : "LocalBusiness", "address" : { "@type" : "PostalAddress", "addressCountry" : "GB", "addressLocality" : "Edinburgh", "postalCode" : "EH2 2EP", "streetAddress" : "22 Hanover Street" }, "geo" : { "@type" : "GeoCoordinates", "latitude" : 55.9526313, "longitude" : -3.1970679 }, "image" : "https://grantmcgregor.co.uk/hubfs/GRMC_blue_logo.svg", "name" : "Grant McGregor", "openingHoursSpecification" : { "@type" : "OpeningHoursSpecification", "closes" : "18:00", "dayOfWeek" : [ "Monday", "Tuesday", "Wednesday", "Thursday", "Friday" ], "opens" : "08:00" }, "sameAs" : [ "https://www.facebook.com/grantmcgregorltd/", "https://x.com/GrantMcGregorIT", "https://www.youtube.com/itgrantmcgregor", "https://www.linkedin.com/company/grant-mcgregor-ltd/" ], "telephone" : "+441316037910", "url" : "https://grantmcgregor.co.uk/" } ```