Measuring What Matters: M365 Security Assessment for Mamu Health Service

Mamu Health Service Gains Measurable Microsoft 365 Security Posture with Technowand

Mamu Health Service Limited (Mamu HSL) delivers culturally appropriate, community-controlled health care for Aboriginal and Torres Strait Islander people across the Cassowary Coast and the Tablelands communities of Ravenshoe and Mount Garnet in Queensland. Mamu needed confidence that its Microsoft 365 environment was truly protecting sensitive health information. With strict obligations under the Australian Privacy Act and Notifiable Data Breaches (NDB) scheme, leadership wanted clear evidence of their security posture, not just assumptions.

Despite already using Microsoft 365, Mamu had no structured way to measure security effectiveness, quantify risk, or prioritise remediation. They engaged Technowand to establish a measurable baseline and deliver a clear, prioritised roadmap to close every gap.

---

The Challenge

Microsoft 365 was in place and many security features were active, but there was no framework to:

• Benchmark security posture against Microsoft’s recommended controls
• Quantify risk in a way leadership could understand
• Prioritise which actions would have the greatest impact

At the start of the engagement, Mamu's Microsoft Secure Score was just over half of its maximum, meaning many of Microsoft's recommended controls were not yet in place. For a health service with mandatory breach reporting obligations, this was more than a technical issue. It was a compliance and reputational risk.

Key issues identified at the outset included:

• No centralised view of daily email threats being blocked
• Limited visibility into device compliance and encryption across the fleet
• File sharing and mail-flow settings that needed tightening
• No executive-level reporting to give leadership confidence in the organisation’s security standing

---

What Working With Technowand Looks Like

Technowand’s Microsoft 365 Security Assessment is designed to be low-friction and non-disruptive:

• Access model: Read-only access only (Global Reader role) to the Microsoft 365 admin portal
• No agents or changes: No software installations, no configuration changes, and no impact on day-to-day users
• Timeline: Full assessment typically completed within 2–3 weeks

At the end of the assessment, the organisation receives:

• A Secure Score baseline across all five Microsoft security domains
• Email threat activity analysis for the assessment period
• Security incident review with timelines and resolution status
• Endpoint compliance and encryption audit across the full device fleet
• Configuration risk findings with specific remediation guidance
• A prioritised remediation roadmap, ranked by Secure Score impact

Technowand then partners with the organisation to close each gap in order of impact, ensuring the most valuable improvements are addressed first.

---

The Assessment

Technowand conducted a comprehensive Microsoft 365 security assessment across identity, email, endpoints, and data protection. Every finding was documented with context and a clear recommended action, giving both technical teams and leadership a shared, actionable view of risk.

Secure Score Baseline

• Assessed posture across all five Microsoft security domains
• Established the organisation’s first measurable benchmark against Microsoft’s recommended controls

Email Threat Visibility

• Surfaced the full picture of email-based threats being blocked daily
• Analysed quarantined messages, spam, phishing attempts, and malware
• Enabled leadership to see, for the first time, the scale of what Microsoft 365 was intercepting on their behalf

Security Incident Review

• Reviewed all Microsoft Defender incidents in the environment
• Analysed timelines, threat classifications, and resolution status
• Flagged open incidents needing immediate attention

Endpoint Compliance Audit

• Audited all Intune-enrolled devices across Windows and Android
• Assessed compliance policy status, BitLocker encryption coverage, and endpoint health
• Mapped the full device fleet for encryption and compliance status

Configuration Risk Identification

Technowand identified three high-priority configuration risks across file sharing, mail flow and external collaboration.

Each was escalated with specific, actionable remediation steps.

Prioritised Remediation Roadmap

• Delivered 100+ ranked recommendations with associated Secure Score point values
• Highlighted 350+ additional Secure Score points within reach
• Enabled the organisation to close gaps in a structured, impact-driven order

---

What the Assessment Found

The assessment delivered visibility the organisation had never had before:

• Starting Secure Score just over half of maximum
• Target Secure Score: 82%
  • Nearly half of Microsoft’s recommended controls still not in place
  • Over 350 additional points achievable with targeted remediation
• Email threat landscape (one-month snapshot):
  • Over a thousand emails quarantined in a single month
  • Hundreds of spam emails blocked
  • Phishing attempts blocked before reaching staff
  • Zero malware reached inboxes — Defender for Office 365 blocked all malicious attachments pre-delivery
• Security incidents:
  • All Microsoft Defender incidents reviewed
  • Open incidents escalated for immediate action
• Endpoint posture:
  • Full device fleet mapped and audited
  • Encryption and compliance status documented across Windows and Android
• Configuration risks:
  • 3 high-priority configuration risks surfaced and escalated with remediation guidance
• Roadmap:
  • Prioritised remediation roadmap delivered, ranked by impact and Secure Score uplift

---

In Their Words

“We knew Microsoft 365 was running, but we genuinely had no idea what was being blocked or what gaps existed in our environment. The assessment gave us a complete picture for the first time — the threats, the risks, and exactly what to prioritise. It changed how our leadership team thinks about security.”

— Senior Leader, Mamu Health Service

---

Know Where You Stand

If your organisation is running Microsoft 365 but lacks clear visibility into how effectively it is protecting you — and you operate under the Privacy Act or the NDB scheme — a Technowand Microsoft 365 Security Assessment gives you:

• The answer: a measurable, evidence-based view of your current security posture
• The evidence: detailed findings across identity, email, endpoints, and data protection
• The roadmap: a prioritised, Secure Score–driven plan to close every gap we find

Talk to the Technowand team to understand your true Microsoft 365 security posture and build a clear, actionable path to improvement.

Technowand provides Microsoft 365 security assessments and Microsoft 365 managed services for businesses across Australia. Contact us to book your M365 security review.

This Microsoft 365 security assessment reflects the kind of compliance work we regularly deliver for healthcare providers — see our IT services for healthcare for more.

For Queensland organisations, see our Microsoft 365 security assessments in Brisbane.

See more of our case studies.

Related Case Studies

Do You Know Your Essential Eight Maturity Level? ACT Not-for-Profit Gets Its Answer

IT That Restores Efficiency: Pistol Australia Story