Identity & Access

Entra ID (Azure AD), RBAC, MFA, Conditional Access, PIM for admin elevation

Device & App

Intune policies, OS patching, BitLocker (Win) and secure wipe, app baselines (Office, Edge, VPN)

Data Protection

Purview DLP + encryption, TLS 1.2+, AES-256 at rest, data categorization and segregation

Monitoring & Logging

Azure Monitor/Log Analytics, Defender alerts, ≥12-month retention in Canada, GC Feed subscription

Backup & Recovery

Azure Backup (Canada regions), optional ASR for Disaster Recovery

Evidence & Audits

Control-by-control evidence register, quarterly review cycle, built-in safeguards and policies

SERVICE PLANS & PACKAGES:

Trusted as-a-Service

User Plan

Includes:

🗸 M365 Business Basic license (Word, Excel, PowerPoint, Outlook)

🗸 One Drive storage

🗸 Multi-factor authentication

🗸 Encryption at rest and in transit

🗸 Canadian hosted data

🗸 Sensitivity labels and auditing

🗸 12 month log retention

Trusted as a Service

Business Plan

5+ users

Includes all features of User Plan plus:

🗸 Roles & Groups administration

🗸 Group sharing & collaboration

🗸 5+ user licenses

Trusted Enterprise

Dedicated Instance

Dedicated PBMM-compliant Azure tenant and CSP Accreditation package.

Azure instance includes:

🗸 Dedicated Azure tenant with M365 Business license

🗸 Multi-factor authentication

🗸 Encryption at rest and in transit

🗸 Canadian hosted data (east & west)

🗸 Sensitivity labels and data categorization

🗸 12 month log retention

CSP Accreditation Support Package:

🗸 PBMM evidence register

🗸 Policies and safeguards documentation including Incident response

Microsoft PKI add-on

Microsoft PKI certificate enabling to:

🗸 Send and receive encrypted communication

🗸 Exchange Protected data with customers

🗸 Increase data integrity