Server rack with network switches and cabling
Self-paced program

Cloud Security Essentials: Microsoft 365 & Google Workspace

A practical guide to locking down Microsoft 365 or Google Workspace, the systems most small businesses now run on. Follow side-by-side checklists to secure accounts, email, file sharing and devices without paying for features you do not need.

$160.00
LevelIntermediate
Duration6 hours
FormatSelf-paced video + configuration checklists
AccessInstant, 12 months
Secure checkout 14-day refund policy Team licenses

What's included

  • 12 months of unlimited access
  • Side-by-side Microsoft 365 and Google Workspace checklists
  • SPF, DKIM and DMARC setup guide with example records
  • Quarterly cloud security review checklist
  • Certificate of completion

Who it’s for

This program is for the person who administers your company’s Microsoft 365 or Google Workspace tenant, whether that is an owner, an operations lead or an IT generalist. You should be able to sign in to the admin console, but you do not need to be a cloud specialist. Every lesson covers both platforms side by side, so you can follow along whichever one you use.

  • Businesses that run email, files and calendars in Microsoft 365 or Google Workspace
  • Startups that set up their tenant quickly and never went back to review it
  • Teams moving from on-premises servers to the cloud
  • Anyone handling customer data under GDPR, HIPAA or PCI DSS expectations

What you’ll learn

Cloud providers secure their platforms, but how your account is configured is up to you. Many small business incidents come down to settings that were never changed from the defaults. This program shows you which settings matter most and how to change them safely.

  • The shared responsibility model and what your provider does and does not protect
  • How to enforce MFA, protect admin accounts and block legacy sign-in methods
  • How to set up SPF, DKIM and DMARC so criminals cannot easily impersonate your domain
  • How to control external sharing in OneDrive, SharePoint, Teams and Google Drive
  • How to manage company and personal devices that access business data
  • How to turn on audit logs and alerts, and back up your cloud data

How it works

Each module starts with a short explanation of the risk, then walks through the relevant settings in both admin consoles. The checklists note which features depend on your subscription tier, so you can make the most of what you already pay for and make an informed decision about upgrading. Changes that could affect users, such as enforcing MFA, come with a rollout plan and sample staff announcement.

The program closes with a quarterly review routine: a short, repeatable check you can complete in under an hour to catch new risks as your business grows. For a preview of the topics, read our article on hardening Microsoft 365 and Google Workspace.

What you get

  • About six hours of on-demand video lessons covering both platforms
  • Side-by-side configuration checklists for Microsoft 365 and Google Workspace
  • Example DNS records for SPF, DKIM and DMARC with a step-by-step setup guide
  • An MFA rollout plan and staff announcement template
  • A quarterly cloud security review checklist
  • A certificate of completion and 12 months of access, including content updates

Prefer to have an expert review your tenant? Our cloud security consulting team can do it with you or for you. Book a free consultation through Get Started to discuss your setup.

Curriculum

01Shared responsibility in the cloud

Understand what Microsoft and Google secure for you, what remains your job and where small businesses most often slip up.

02Identity first: MFA and admin accounts

Enforce MFA, protect and limit admin roles, block legacy authentication and set up break-glass access.

03Email security: SPF, DKIM and DMARC

Publish the right DNS records, move DMARC toward enforcement and tune built-in anti-phishing and anti-malware settings.

04Sharing and data protection

Control external sharing in OneDrive, SharePoint, Teams and Google Drive, and find files that are already overshared.

05Managing devices

Apply basic device management and access rules for company laptops and personal phones that touch business data.

06Audit logs and alerts

Turn on audit logging, review sign-in activity and configure alerts for the events that signal real trouble.

07Backing up cloud data

Learn why retention is not the same as backup, and choose a backup approach for mail, files and shared drives.

08Your quarterly review routine

A repeatable, under-an-hour checklist to keep your tenant secure as users, apps and settings change.

More programs

Continue learning

3 hoursSelf-paced video + knowledge checks

Security Awareness for Everyone

Practical security awareness training that everyone on your team can understand, from the front desk to the founder. Short, friendly lessons build the everyday habits that…

$150.00 Purchase Now
5 hoursSelf-paced video + tabletop exercise kit

Ransomware Readiness Bootcamp

A focused bootcamp that helps small businesses prevent ransomware, limit the damage if it strikes and recover with confidence. You will finish with tested backups, a…

$140.00 Purchase Now