“How do your people sign in?”
Some use one password everywhere. One person set up something extra on their phone. Nobody is sure what the honest answer is.
For owners whose insurer asks about security
When the insurer asks about security, you’ll have the answer.
We turn on nearly all the security Microsoft 365 offers, for your computers, your account, your sign-ins, and your email. Then we keep it on and watch your account around the clock.
Where this usually starts
The form arrives, and nobody in the building can answer the first question.
“Could a thief read the files on a stolen company laptop?”
Maybe not on the newer ones. The laptop from three years ago was set up by someone who has since left.
None of this is carelessness. The tools got added one at a time, with nobody in charge of all of them.
Why this works
You may already pay for good tools. We turn them all on and keep watch.
What’s usually missing is someone to switch the tools on for every person and every computer, then keep them that way. That’s the job we take on, and we watch your Microsoft 365 account for security problems around the clock.
The tools run around the clock, and so do we
The security tools don’t stop at night or on weekends. Baseline monitors your Microsoft 365 account for security issues 24 hours a day, 7 days a week.
The two weak spots we take out, and what happens if something looks wrong
With the Baseline setup, nobody has a password, so there’s nothing to give away to a fake email. And nothing installs on a company computer without a one-time code a manager approves. The code works once, and it changes about an hour later.
That doesn’t stop every scam or every bad program. It makes many of them much harder, and many of those problems never happen. The computer protection can also spot threats and act on many of them by itself, at any hour.
If something looks wrong, ask in Teams. The AI assistant helps right away, and a real person responds within 10 minutes when it becomes a ticket, day or night. See how help works →
Already turned on
Four layers of security, all turned on.
Your computers, your Microsoft 365 account, your sign-ins, and your email. We turn on nearly all the security Microsoft 365 offers, set it the same way for everyone, and keep it that way.
1 · Your computers
Every company computer, locked down the same way
- Antivirus and threat detection that watches for odd behavior and can act on its own, day or night
- Windows’ built-in firewall turned on and kept on
- The hard drive locked automatically, so a lost laptop doesn’t hand over its files
- Unsafe kinds of websites blocked, in the office or away
- New programs need a manager’s OK and a one-time code
Microsoft Defender for Business · Windows Firewall · BitLocker · web content filtering. On computers that join the Baseline setup.
2 · Your Microsoft 365 account
Your company’s account, watched around the clock
- We watch it for security problems 24 hours a day, 7 days a week
- Links and files shared in Teams and OneDrive get checked too
- Security settings reach every computer from one place, and stay set
- When someone leaves, their access is turned off from one screen
Microsoft 365 Business Premium · Defender for Office 365 in Teams, OneDrive, and SharePoint · Intune.
3 · Your people’s sign-ins
No passwords to steal
- People sign in with a face, fingerprint, or PIN tied to their own device
- There’s no password for a fake email or a fake sign-in page to trick out of anyone
- One company sign-in per person, so turning it off closes every door at once
Microsoft Entra · passkeys · Windows Hello.
4 · Your email
Scams checked before they reach the inbox
- Scam links and harmful attachments get checked before anyone opens them
- Emails pretending to be your boss or a supplier you know get flagged
- Your web address carries the records that prove your email really comes from you. That makes it much harder to fake
Defender for Office 365 Plan 1 · anti-phishing and impersonation protection · SPF, DKIM, and DMARC records on your email domain.
These are preventive security settings built into the setup Baseline manages. Email, sign-in, and the watch on your account come with every Microsoft 365 account we build. The computer layer arrives by itself when a computer joins the Baseline setup.
The full technical list, for your IT person or insurer
- Computers: Microsoft Defender for Business, with endpoint detection and response (EDR), real-time protection, behavior monitoring, automated investigation and remediation, and web content filtering in supported browsers. Windows Firewall managed through Defender for Business and Intune. BitLocker drive encryption on compatible devices, with recovery keys held in your company’s Microsoft setup. Standard user accounts, with a temporary local administrator password for one computer that expires after use. Windows 11 Pro, version 24H2 or later.
- Account: Microsoft 365 Business Premium. Device enrollment, central management, and policy-based configuration through Microsoft Intune. Baseline monitors each customer’s Microsoft 365 account for security issues 24 hours a day, 7 days a week.
- Sign-in: Microsoft Entra, passkeys, and Windows Hello.
- Email: Microsoft Defender for Office 365 Plan 1 and Exchange Online Protection, with Safe Links, Safe Attachments, and anti-phishing and impersonation protection, also covering supported links and files in Teams, OneDrive, and SharePoint. SPF, DKIM, and DMARC configured for the company’s email domain.
For the form on your desk
Answer the insurer’s questions without calling around.
Copy our plain description of a Baseline setup into the form, then edit it to match your answers. It describes the setup. It isn’t a certificate, an audit, or proof that any requirement is met.
Got a list from a client, insurer, or industry rule? Send it. We’ll compare it with your exact setup, item by item.
How the comparison works
You share it
The form, the wording of the rule, or the list of settings someone asked you about.
You: forward what you were sent.
Baseline compares
We check each item against the exact setup your company would run on.
Baseline: does the comparison.
You decide
Whether that’s enough is up to you and whoever asked. Baseline explains. It doesn’t sign off or give a certificate.
You: make the call.
Baseline describes how your setup works. It never claims your company meets any rule or standard.
The paragraph for your insurer or client, with technical names
Our company’s Microsoft 365 setup is managed by Baseline (A32 Labs Inc.) Employees sign in with one company account through Microsoft Entra, using Windows Hello or a passkey (face, fingerprint, or device PIN) instead of a normal password. Supported company computers run Windows 11 Pro, version 24H2 or later, are enrolled in Microsoft Intune, and receive their security settings through policy-based configuration. Microsoft Defender for Business provides real-time protection, behavior monitoring, endpoint detection and response (EDR), and automated investigation and remediation. Email is checked by Microsoft Defender for Office 365 Plan 1 and Exchange Online Protection, including Safe Links, Safe Attachments, and anti-phishing and impersonation settings. Web content filtering blocks selected categories of sites in supported browsers on supported company computers. BitLocker encrypts drives on compatible supported devices, with recovery keys held in our Microsoft setup. Windows Firewall is turned on and managed through Microsoft Defender for Business and Microsoft Intune. SPF, DKIM, and DMARC records are configured for the company’s email domain, so mail sent from it can be verified. Desktop, Documents, and Pictures are saved to OneDrive through Known Folder Move. Employees use standard user accounts, and approved software installs use a temporary local administrator password that expires after use. Access removal starts from one place, the Baseline Manager Portal. The security tools run continuously, and Baseline monitors our Microsoft 365 account for security issues 24 hours a day, 7 days a week.
Before you decide
Straight answers to the security doubts owners bring us.
You can hand this page to your IT person or your insurer.
“We already have antivirus. We’re fine.”
- Why it feels true
- You paid for something, and it’s running somewhere.
- What’s true
- One tool on some computers isn’t one answer for the whole company.
- Proof
- The nine settings above, set the same way across the Baseline setup.
“Baseline will make us meet the security rules.”
- Why it feels true
- That’s what the form seems to ask for.
- What’s true
- We build your setup, write it down, and explain what matches. Whether that’s enough is your call.
- Proof
- The comparison above. Baseline never signs off or gives a certificate.
“If a laptop gets stolen, our files are gone.”
- Why it feels true
- Laptops get left in cars and cafés.
- What’s true
- The drive is locked, the work folders come back on a replacement, and access turns off from one place.
- Proof
- Settings 5, 6, and 9 above.
“Good security means buying more products.”
- Why it feels true
- Every security pitch ends with one more thing to buy.
- What’s true
- These tools come with Microsoft 365, which is in the price: $45 per user per month, Microsoft 365 included. Annual commitment, paid monthly.
- Proof
- The published price on the pricing page.
Weigh it up
What changes when one company keeps the settings on.
What you get
One clear answer you can send back to the insurer.
What goes away
Guessing which laptop is locked, or who can still get in.
If nothing changes
The next form asks the same questions, and the answer is still “it depends.”
What you’d miss
Tools you may already pay for, sitting there half turned on.
The next step
Get your Fit Check. Then bring your hardest security question.
Five quick questions get you your Fit Check on the spot. Then a 30-minute call compares the setup with what your clients or insurer ask of you.
P.S. We turn the safety settings on for every person and computer, and we keep them on. And we watch your Microsoft 365 account for security problems around the clock.
What happens after you click
- You answer five quick questions. It takes about two minutes, and “not sure” never counts against you.
- You get your Fit Check on the spot: whether Baseline fits, your estimated price, and what each choice costs. Save, print, or email it.
- If you want to talk it through, you book a 30-minute call. Bring the form or list of rules if you have one.