Cloud configuration reviews
Ontario

A clearer view of your cloud settings.

Understand how your business’s cloud services are set up and which reviewed settings need attention. Lucerna provides scoped configuration reviews for Microsoft 365, Google Workspace and specifically agreed online business applications.

A call can help identify a suitable review. If you already know the platforms and requirements, describe them in an inquiry. Scope and pricing are determined after understanding your needs.

What can be reviewed

The platforms your business uses.

Configuration means how a service is set up. Lucerna reviews the security settings agreed for your business and explains the findings and practical next steps. For Microsoft 365 and Google Workspace, selected settings are compared with a security baseline: a reference set of recommended security settings. The exact checks are agreed before work.

Microsoft 365

Selected security settings in your business’s Microsoft 365 environment are compared with the agreed baseline. Potential findings are examined before they are included in your report.

Google Workspace

Selected security settings in your business’s Google Workspace environment are compared with the agreed baseline. Potential findings are examined before they are included in your report.

Additional SaaS applications

SaaS applications are software services your business uses online. For a specifically agreed application, Lucerna manually reviews accessible security settings. Name the application and your question so suitability can be confirmed; the work is limited to the settings agreed for review.

Technical basis and access

Microsoft 365 reviews use CISA ScubaGear; Google Workspace reviews use CISA ScubaGoggles. Additional SaaS settings are reviewed manually. Exact checks, licensing, permissions and authorized access arrangements are confirmed before work. The platform baseline tools and manual SaaS reviews have different coverage; the agreed scope identifies which settings will be assessed.

When it is useful

Questions a review can help answer.

For Ontario accounting, legal, paralegal, financial-services and other professional firms, a review gives an owner understandable findings and an IT contact practical detail. You can start with a question in everyday language.

  • “Which settings need attention?”A Microsoft 365 or Google Workspace review compares the agreed settings with the baseline and reports reviewed findings.
  • “Can you review this application?”Name the online business application and the configuration question. Lucerna confirms whether a limited manual settings review is suitable.
  • “What should our IT contact do next?”The report explains the findings and recommended changes so your IT staff or provider can plan the next steps.
  • “Can we review these settings again?”Quarterly reassessments can repeat agreed work at scheduled intervals. They do not provide continuous monitoring.

A cloud review can stand alone or accompany a vulnerability assessment in one scoped engagement. Suitability depends on the platforms, accessible settings, requested work and available capacity.

How it works

From your question to written findings.

  1. 01
    Describe what you use and want to understand

    Book a call if you want help choosing a review. If you already know the platforms and requirements, describe them in an inquiry. Lucerna may ask questions before preparing a proposal.

  2. 02
    Agree what will be checked

    Confirm the platforms, settings, permissions, schedule and price. Written agreement and authorization come before technical work. Cloud and network work can be quoted and billed together as one engagement.

  3. 03
    Review the settings and results

    Compare the selected Microsoft 365 or Google Workspace settings with the agreed baseline, or manually review accessible settings in the agreed SaaS application. Examine potential findings before reporting them.

  4. 04
    Explain what needs attention

    Provide written findings and practical recommendations for the owner and IT contact, with limited follow-up explanation as agreed. Your IT staff or provider may carry out the changes.

What you receive

Know what was checked and what to do next.

  • What was checkedA record of the platforms, selected settings and review conditions, including the limits of the work.
  • What needs attentionReviewed observations with an explanation of what they mean, written for business decision-makers and IT personnel.
  • Which changes to considerPractical configuration recommendations and priorities to help your IT contact plan changes.
  • Help interpreting the findingsLimited explanation and prioritization after the report, as agreed. Your IT staff or provider continue managing the environment; hands-on fixes are not included by default.

A configuration review covers the agreed settings. It does not test every application weakness, cover every platform feature or guarantee security. Additional work and any scope or price change are agreed separately before proceeding.

Start with the cloud services you use.

Book a call if you want help deciding what to review. If you can describe the platforms and scope, send an inquiry. Lucerna may ask questions, suggest a conversation or prepare a proposal after reviewing your needs.