Microsoft 365 Tenancy Security
Know whether the tenancy your business runs on is secured — an independent read written for leadership.
Services · Engagements
Scoped · In writing
Five ways to get an independent answer.
Every engagement gives leadership an independent answer, in writing and in plain English. Audits, retainers and Pulse subscriptions are fixed-fee; AI Enablement is priced per engagement, scoped to the work.
№ 01 · Entry
Quick-Scan
One domain, a credible read within days.
№ 02 · Flagship
Baseline Audit
The full picture, scoped to the engagement.
№ 03 · Ongoing
Technology Advisory
A senior voice, every month.
№ 04 · Recurring
Adeo Pulse
The month’s verdict, in writing.
№ 05 · Bounded advisory
AI Enablement
A specified capability, independently verified.
How each engagement is priced is set out in its section; every fee is confirmed in writing before work begins, and fees are quoted ex GST. Recurring work starts under a signed agreement that sets out how it continues and how either party can end it.
Side by side
| Engagement | Best for | You receive | Timeframe | From |
|---|---|---|---|---|
| Quick-Scan | One specific question, in one domain | A written assessment, walked through with you | Within days | A$2,400, fixed |
| Baseline Audit | The complete picture across all five domains | A written audit with a 12-month roadmap and a closing readout | A focused engagement over several weeks; dates in the proposal | A$7,500, fixed |
| Technology Advisory Retainer | Standing independent advice without a full-time IT lead | Monthly advisory time, Pulse included, leadership reviews | Monthly; a short initial term, then month to month | A$1,195 a month |
| Adeo Pulse | Monthly oversight of what your MSP delivers | The month’s issue: five-domain scorecard, technical appendix and a forward email for your MSP | Monthly, within the first three business days | A$550 a month |
| AI Enablement (Advisory) | A chosen AI use, specified and independently verified | A specification and governance pack, verification of the build, a closing readout | Time-boxed; dates in the proposal | A$4,500 per engagement |
Start with a Quick-Scan or a Baseline Audit. Pulse follows once a starting position is in place, usually a Baseline Audit.
№ 01 — Entry engagement
One domain, one written answer
Quick-Scan.
When you need a credible answer in one area before committing to anything larger, the Quick-Scan delivers it: a fixed-fee read on a single domain, written for the leadership desk. It arrives in writing within days, signed off by a principal, and we walk you through it in a closing conversation.
Choose from five variants, each aimed at an operational pressure point you will recognise from running an Australian SME.
Backup & Recovery Readiness
Find out whether the recovery story your MSP describes is the one your insurer expects to see.
Cyber-Insurance Readiness
Walk into the renewal conversation knowing exactly where your controls sit against your insurer’s current expectations — before they ask. What insurers ask at renewal →
MSP Value & Performance
Settle the question of whether your MSP is delivering the value your contract describes — evidence-led, written for leadership, and built to forward straight to the account manager.
AI Adoption & Posture
Find where AI already sits in your firm — the tools in use, the shadow-AI outside any policy, and how your data handling and prompt governance stand against your professional body. It is the entry point to the AI conversation.
On Variant E — AI Adoption & Posture
Before leadership decides what AI should do next, this fast, assessment-only engagement shows you what it is already doing. The work inventories the AI tools in use across the practice, surfaces the shadow-AI running outside any policy, and reads your data-handling and prompt-governance posture against the relevant professional body — AHPRA, your Law Society, or APES 110 — including data-loss prevention and retention for AI-handled information.
You walk away with an AI posture brief: prioritised recommendations and a next step — either an AI Enablement engagement, where Adeo writes the specification and independently verifies the build your team or provider delivers, or a build your own team takes forward from the recommendations in the brief. The assessment carries no obligation to proceed with either.
Two tiers by depth — Tier I from A$2,400, Tier II (including AI Adoption & Posture) from A$3,500 — fixed in your written proposal before work begins, with larger or multi-entity engagements scoped accordingly.
- Fee
- From A$2,400 · fixed up front
- Scope
- One domain you choose
- Form
- A written assessment leadership can act on, walked through with you
№ 02 — Flagship engagement
Five domains, one signed verdict
Baseline Audit.
The Baseline Audit is the complete, independent verdict on the IT your business depends on, assessed across all five domains: service delivery, commercial discipline, roadmap & governance, security & compliance, and AI adoption & posture. Each is measured against the standards your context calls for: the ACSC Essential Eight, ISO/IEC 27001:2022, NIST CSF 2.0 and the CIS Controls for security; the NIST AI Risk Management Framework and ISO/IEC 42001:2023 for AI adoption and posture; your obligations under the Australian Privacy Principles; and the controls your insurer requires at renewal — scoped to your engagement, every finding cited to its benchmark. The engagement runs over several weeks, evidence-led throughout, and every finding carries a principal’s signature. It ends in a single document leadership or the board can read and act on.
The form of the work
Each engagement concludes with a written audit document carrying the findings and a 12-month roadmap. The section addressed to your MSP is built to be forwarded without further edit. A closing conversation walks leadership through the findings; the full form of the work is set out in your written proposal.
Fee
Baseline Audit engagements run from A$7,500, scoped to your organisation by size and agreed in the written proposal. Every engagement is fixed-fee, so you know the cost before work begins.
№ 03 — Ongoing
Standing advice, sized to the firm
Technology Advisory Retainer.
An independent technical voice sits at the table every month, without the cost or commitment of a full-time IT lead. There are four tiers (Lite, Foundation, Standard, Strategic), sized by headcount and engagement depth. Each gives you advisory time for the decisions, reviews and hard MSP conversations leadership should not face alone. Adeo Pulse is included — onboarding now, with your first issue scheduled in the written proposal — and the rhythm of reviews and accountability scales with the tier.
Lean teams
Up to 15 users
- Advisory time each month, sized for a lean team
- Pulse Essential, monthly
- An annual leadership review
Small SMEs
10 to 30 users
- A fuller allocation of monthly advisory time
- Pulse Essential, monthly
- Leadership reviews on a quarterly cadence
Mid-market
31 to 75 users
- A substantive monthly advisory engagement
- Pulse Premium, monthly
- Leadership reviews on a quarterly cadence
- A regular MSP accountability cadence
Larger SMEs
76 to 200 users
- Senior advisory at the depth a board expects
- Pulse Premium, monthly
- Board-ready leadership reviews each quarter
- A close MSP oversight cadence
- An annual re-baseline of the five domains
Retainers run from A$1,195 a month, scoped to your size and the depth of engagement. Where the user bands overlap, the depth of engagement decides the tier. A short initial term, then month-to-month on thirty days’ notice; the tier and the precise advisory time agreed are set out in your written proposal before anything begins.
№ 04 — Recurring deliverable
One issue a month, signed by a principal
Adeo Pulse.
Pulse is a standing, independent read on your IT. It reaches the leadership desk within the first three business days of every month, before anyone has to go looking for it, scored across service delivery, commercial discipline, roadmap & governance, security & compliance, and AI adoption & posture, cross-walked to the ACSC Essential Eight, ISO/IEC 27001:2022, NIST CSF 2.0 and CIS Controls — with the AI domain read against the NIST AI RMF and ISO/IEC 42001:2023 — alongside your insurer’s renewal requirements. Editorially signed off before it leaves Adeo. A pre-written email to your MSP account manager travels with every issue.
Inside each issue
The issue carries an executive scorecard, a technical appendix with framework cross-walks and cost-of-inaction annotations, a paste-ready email for your MSP, a roadmap status delta, a plain-English glossary, and methodology with editorial sign-off. Same structure every month, carrying the month’s evidence — a glance tells you what moved and what needs attention.
Fee
Pulse comes in two forms. Essential, from A$550 a month, is the full monthly issue for smaller organisations. Premium, from A$850 a month, covers larger organisations and groups, with every integration in scope and a quarterly review. Groups, multi-entity structures and bespoke insurer cross-walks are scoped on request. Pulse is onboarding now; the written proposal sets the month your first issue arrives.
See the full sample issue →
Adeo Pulse Premium
Specimen
Monthly Performance Scorecard
Warburton & Field Lawyers · an invented firm; every figure synthetic
78 / 100
- Service delivery
- Commercial
- Roadmap & governance
- Security
- AI adoption & posture
Editorially signed off — AdeoPage one · View all →
№ 05 — Bounded advisory
Adeo specifies and verifies; your team builds
AI Enablement (Advisory).
When the AI opportunity is clear, this is the engagement that turns it into something your firm can run safely. AI Enablement is a scoped advisory, priced per engagement from A$4,500, for when a Quick-Scan, a Baseline Audit or a retainer conversation has found a specific use worth building. Adeo writes the specification — what to deploy, how to govern it against your professional-body obligations, and how your people are supervised — and then independently verifies what gets built. The capability is built, configured, and operated by your own team, your MSP, or a nominated partner; the boundary is recorded in every engagement letter.
Two tiers
Tier I — Vendor-platform enablement. A complete specification for one off-the-shelf platform — Microsoft 365 Copilot, Gemini for Workspace, Claude for Work, or ChatGPT Enterprise. It covers governance design (data residency, prompt handling, citation requirements), a prompt library, a role-based rollout plan, and a supervision SOP aligned to AHPRA, your Law Society and the court guidance that applies to your matters, or APES 110 — with independent verification of the build your team or provider delivers against it.
Tier II — Platform plus workflow automation. Tier I plus the specification and verification of a no/low-code workflow automation built on your existing platforms — by your team or provider, to Adeo’s specification.
Out of scope
Bespoke code, custom model training or fine-tuning, ongoing production operations, on-call coverage, and agentic systems Adeo would be responsible for monitoring beyond engagement close. These are handed to your MSP or a nominated build partner.
Working papers
The standards behind every score
What we measure against.
Every domain Adeo reviews is measured against a documented reference: formal frameworks for security, your professional body’s guidance for AI adoption, and, for the rest, your own contracted commitments.
Service delivery
MSP contracted SLAs Ticket data · SLA attainment
Commercial
Contract terms Invoice accuracy · published list pricing
Roadmap & governance
Committed vs delivered Change-register hygiene
Security & compliance
ACSC Essential Eight Plus your renewing insurer’s current control expectations
AI adoption & posture
NIST AI RMF · ISO/IEC 42001:2023 AI tool inventory · AHPRA, Law Society, APES 110
Every finding is cited to the relevant benchmark, and the evidence is documented so it can be handed to a board, insurer or parent company as it stands.
Next step
Not sure which engagement fits?
Tell us the issue or decision you need to address, and we will tell you the smallest engagement that answers it. A thirty-minute conversation at no cost is the fastest way to decide. If a Quick-Scan is the right starting point we will say so; if a full Baseline is more than your question needs, we will say that too.
Start a Conversation →