Newblend Book an introduction
Pillar 02

Cloud & software

There is a lot on offer and every supplier says its solution is the best. We look at your requirements, your way of working and your budget, and advise what fits.

In short
  • Microsoft 365 as the heart of the work environment: email, collaboration, identity through Entra ID and device management through Intune.
  • Migrations planned so your work does not stop, with a fallback option.
  • Daily full backup of mailboxes, SharePoint and OneDrive, with a tested recovery procedure.
  • Licence management: you pay for what you use, not for accounts of former employees.
  • A Microsoft 365 account alone is not security. Setup and management make the difference.
Last updated: 10 November 2026
Diagram · Microsoft 365 setup
Entra ID
Identities and role profiles
Multi-factor authentication
On all accounts, including admin
Conditional access
Conditions per device and location
Access to data
Exchange
Mail and calendar
SharePoint
Documents per team or case file
OneDrive
Personal work folders
Teams
Collaboration and calls
Protection
Defender
Filtering and detection
Classification labels
Confidentiality recorded
Retention periods
What can go, goes
Recovery
Microsoft 365 Backup
Daily backup of mail, SharePoint and OneDrive, with a tested recovery procedure. Microsoft does not do this for you by default.

The setup we use as standard in Microsoft 365. Exactly what is enabled depends on your licences and your risks.

What we do

Four components

Microsoft 365 setup

Tenant management, security settings, identity management through Entra ID and device management through Intune. Set up and controlled centrally, not improvised per user.

Migrations

From local servers or an old environment to the cloud. We schedule the cutover outside working hours, test in advance and keep a fallback option ready.

Backup and recovery

Daily full backup of mailboxes, SharePoint and OneDrive, with ransomware protection. We test recovery, because a backup that does not come back is not a backup.

Licence management

An overview of what you buy and what you use. Licences are adjusted immediately during on- and offboarding, so you do not pay for former employees.

Security

What we set up as standard

These measures are included in the blends and can also be arranged separately.

  • Multi-factor authentication and conditional access for all users.
  • Spam and phishing filtering, plus continuous monitoring of DKIM, DMARC and SPF.
  • A clean permissions model in SharePoint and Teams, so people only see what they are allowed to see.
  • Managed Detection and Response on the Microsoft 365 environment, including Identity Threat Detection.
  • Logging and retention periods in line with ISO 27001 and the NIS2 duty of care.
Important for AI

Copilot and AI agents see what a user is allowed to see. A clean permissions model is therefore the first step for any AI rollout. Read more about Microsoft Copilot.

Independent

Why we sometimes say no

Not every organisation belongs fully in the cloud. With specific software, heavy files or strict data location requirements, a hybrid setup is often better. That sometimes costs us a licence contract, but it works.

What we always recommend: one identity per employee, multi-factor authentication and a tested backup. Those are the measures that stop most incidents in practice.

Frequently asked questions

How long does a migration to Microsoft 365 take?

For most SMEs a few weeks, of which the actual cutover takes one weekend. Most of the lead time is preparation: cleaning up data, defining permissions and testing.

Does Microsoft 365 already include a backup?

Not in the way most organisations think. Standard retention periods are limited and deleted or encrypted data cannot always be recovered. That is why we provide Microsoft 365 Backup as a separate service.

Can we keep our own licences?

Yes. We include existing contracts in the assessment and point out where we see duplicate costs or risks.

What happens to our old server?

It sometimes stays in place for a while as a fallback. After that we decommission it properly, with data deletion you can demonstrate.

Read more

Want to talk it through?

Book a half-hour introduction. We are happy to think along, even if you do not yet know exactly what you are looking for.