Email Threat Exposure Assessment - 30-Day Microsoft 365 Gap Analysis

Do you know what email threats Microsoft 365 is letting through in your environment? The Email Threat Exposure Assessment is a fixed-scope, 30-day professional services engagement delivered by Qirx (Canberra-based implementation partner) and powered by the FirstWave CyberCision email security platform with Cisco Talos threat intelligence.

How It Works

A read-alongside connector is set up next to your existing Microsoft 365 tenancy. Setup takes less than 2 hours inside a normal change window and nothing changes for your users or your mail flow. Over 30 days, CyberCision observes what Microsoft 365 is letting through. At the end of the observation period, Qirx presents the findings in a 30-minute readout and delivers a written report.

What You Receive

The findings report includes threats observed in your environment (phishing URLs, outbreak and QR-code threats, viruses, malware, and spam missed by Microsoft 365), a control gap analysis covering malicious attachment defence, link and URL protection, spoofing and impersonation controls, and Essential Eight email maturity indicators. The report also provides recommended remediation steps including hardening Microsoft 365 connector configuration, closing identified ISM email control gaps, and establishing audit-ready evidence reporting.

Deployment and Sovereignty

CyberCision deploys in AWS Australia regions. Implementation and L1 support come from Qirx locally, with L2 and L3 platform support from FirstWave, an ASX-listed Australian company. The assessment is procured via AWS Marketplace Private Offer under your existing AWS arrangements. No new vendor onboarding is required.