Single control point
We run your offices, laptops, phones, servers and cloud from a single control point.
Managed IT
Network, cloud and Microsoft 365 management from FunctionOne
Managing a company's network, cloud and Microsoft 365 involves running offices, laptops, phones, servers and cloud from a single control point and watching Microsoft 365 accounts and email for threats, the work FunctionOne does through Network, cloud and Microsoft 365. The service is part of FunctionOne managed IT, either fully managed or co-managed beside an in-house IT team. Leadership gets a monthly summary and a regular security review.
Book a security assessment
We'll review your systems and accounts, then agree scope and response rules with you before anything is switched on.
We use your details only to arrange your assessment.
What FunctionOne network, cloud and Microsoft 365 management includes
FunctionOne covers these parts of your network, cloud and Microsoft 365, with security handled as part of daily IT work.
Network monitoring
We monitor your network and connected systems and act first when something looks wrong.
Cloud management
Your cloud services run under the same control point and monitoring as your offices and servers.
Microsoft 365 sign-in alerts
Security analysts watch Microsoft 365 accounts for sign-ins from unusual locations and repeated password attempts.
Mailbox and forwarding checks
Analysts flag unauthorized mailbox access and new rules that forward email to outside addresses.
Security setting changes
Our analysts also watch for changes to multifactor sign-in, the extra step that confirms who is signing in, and to permissions or security settings.
Approved response rules
Containment happens only within response rules you approve. We start with a security assessment, then agree scope and those rules before anything is switched on.
Leadership reporting
Leadership gets a monthly summary and a regular security review that names owners and next steps.
Who is responsible for Microsoft 365 security, and where does FunctionOne help?
Microsoft says that whatever the deployment type, the customer always keeps responsibility for data, endpoints, accounts and access management (Microsoft Learn, Shared responsibility in the cloud, 2026). For Microsoft 365, the same Microsoft Learn page from 2026, Shared responsibility in the cloud, lists network controls as Microsoft's, client devices as shared, and customer data, configurations, identities and users as the customer's. Those accounts and settings are where our analysts watch for unusual sign-ins, mailbox access and forwarding rules.
CISA says end-of-support edge devices such as firewalls, routers, switches and wireless access points no longer receive updates from the maker and are attractive targets (CISA, Binding Operational Directive 26-02, Mitigating Risk from End-of-Support Edge Devices, 2026). Edge devices are the equipment where your network meets the internet. The directive binds federal civilian agencies. Our work with a new client starts with a security assessment that reviews systems and accounts.
CISA's performance goals call for accurate documentation of the current network topology, reviewed annually (CISA, Cross-Sector Cybersecurity Performance Goals 2.0, 2025). Network topology means the map of how your offices, devices and connections fit together. We report to leadership with owners and next steps.
How does FunctionOne start managing your network, cloud and Microsoft 365?
FunctionOne clients start in the same order, and nothing is switched on until you approve the response rules.
Security assessment
FunctionOne reviews your systems and accounts first. All FunctionOne clients start here.
Scope and response rules
You and FunctionOne agree on what's in scope and which response rules the security analysts follow. Nothing is switched on before you agree.
Single control point
FunctionOne runs your offices, laptops, phones, servers and cloud from a single control point.
Around-the-clock monitoring
FunctionOne security analysts watch connected systems around the clock, including Microsoft 365 sign-ins, mailbox access and forwarding rules. They act only within the response rules you approved.
Leadership reporting
Leadership gets a monthly summary and a regular security review. Reports name owners and next steps.
Should FunctionOne fully manage or co-manage your IT?
FunctionOne offers two ways to manage your network, cloud and Microsoft 365, and the security work stays the same in both.
| Fully managed IT | Co-managed IT |
|---|---|
| FunctionOne runs your offices, laptops, phones, servers and cloud | FunctionOne works beside your in-house IT team on those systems |
Who is FunctionOne's network, cloud and Microsoft 365 service for?
FunctionOne works with established mid-size and large organizations that have outgrown a help desk.
Owners and executives
FunctionOne gives you a monthly summary and a regular security review. Reports name owners and next steps for your network, cloud and Microsoft 365.
IT directors with teams
Your in-house IT team can work beside FunctionOne through co-managed IT. Our security analysts watch connected systems around the clock.
Leaders who report upward
If you answer to a board, insurer, auditor or parent company, FunctionOne reports give you owners and next steps to share.
Organizations with several offices
FunctionOne runs offices, laptops, phones, servers and cloud from a single control point. We work from Syracuse, New York and Tampa, Florida.
What do leaders ask FunctionOne about Microsoft 365 management?
What does FunctionOne monitor in Microsoft 365?
FunctionOne security analysts watch Microsoft 365 accounts and email for sign-ins from unusual locations, repeated password attempts and unauthorized mailbox access. They also flag new external forwarding rules and changes to multifactor sign-in, permissions or security settings.
Doesn't Microsoft secure Microsoft 365 for us?
Microsoft covers part of it. Microsoft Learn's Shared responsibility in the cloud (2026) says the customer always keeps responsibility for data, endpoints, accounts and access management. FunctionOne security analysts monitor your Microsoft 365 accounts and email and act only within response rules you approve.
Can FunctionOne work with our in-house IT team?
Yes. FunctionOne offers fully managed IT, or co-managed IT beside an in-house IT team. In both cases, the first step is a security assessment, and FunctionOne agrees on scope and response rules with you before anything is switched on.
Why do old firewalls and routers matter for our network?
Old edge devices can stop getting updates. CISA's Binding Operational Directive 26-02, Mitigating Risk from End-of-Support Edge Devices (2026), written for federal agencies, says end-of-support firewalls, routers, switches and wireless access points no longer receive maker updates and are attractive targets. FunctionOne's security assessment reviews your systems and accounts.
Is there a public standard for Microsoft 365 security settings?
Yes. CISA's Microsoft 365 Secure Configuration Baselines, first released as version 1.0 in December 2023, give public secure settings for Microsoft 365. FunctionOne security analysts watch for changes to multifactor sign-in, permissions and security settings in your Microsoft 365 accounts.
What reports will our leadership get from FunctionOne?
Leadership gets a monthly summary and a regular security review from FunctionOne about your network, cloud and Microsoft 365. Reports name owners and next steps, which you can share with a board, insurer, auditor or parent company.
Sources
- Microsoft Learn, Shared responsibility in the cloud, 2026
- CISA, Microsoft 365 Secure Configuration Baselines, 2023
- CISA, Binding Operational Directive 26-02, Mitigating Risk from End-of-Support Edge Devices, 2026
- CISA, Cross-Sector Cybersecurity Performance Goals 2.0, 2025