Not sure where to start? An assessment shows you what actually needs attention.
Monthly IT health report
Kestrel & Vance LLP: June 2026
Generated Jul 2, 2026 by Retrisa · Read from Microsoft 365
- Staff
- 31
- Accounts
- 32
- Managed devices
- 37 (31 computers, 6 mobile)
- Plan
- Premium
Accounts are the 31 staff plus Retrisa’s monitored break-glass admin account.
Summary
Email spoofing protection (DMARC) moved to full enforcement on June 12, so messages pretending to come from the firm are now rejected. There were no security incidents.
One account, a partner who was traveling, was still not enrolled in multi-factor authentication at month end; enrollment was booked for early July.
Security posture
- Microsoft Secure Score64%Good
Similar-sized organizations average 52%.
- MFA coverage31 of 32 accounts (97%)Exception
The exception is one partner who was traveling and had not completed enrollment. See open issues.
- Admin accounts2, both with MFAGood
- Devices encrypted37 of 37Good
All devices encrypted.
- Devices fully up to date35 of 37Good
Two devices were waiting for a restart at month end; both restarted by July 2.
- Email spoofing protectionSPF, DKIM and DMARC enforcedGood
Account and access changes
- Jun 12EmailDMARC moved from monitoring to enforcement after two clean weeks of reports.
- Jun 20LeaverA departing associate: sign-in blocked on the last day, files transferred to the supervising partner.
Devices and patching
35 of 37 devices fully up to date; all encrypted.
Exceptions
Two laptops
Waiting for a restart at month end.
Action: Both restarted by July 2.
Backup and recovery testing
In scope for this client: Microsoft 365 mail, OneDrive and SharePoint, backed up nightly and kept for one year. The firm has no on-site servers.
- 30 of 30 nightly Microsoft 365 backups completed successfully.
- Jun 26: a OneDrive folder restored to a test location in 7 minutes and checked. Passed.
Work completed
- DMARC moved to enforcement
- Leaver removed on the agreed date
- Monthly updates installed
- Backup restore test completed and verified
Open issues
- High severity
One account without MFA
- What
- A traveling partner had not completed enrollment.
- Owner
- Retrisa with the partner concerned
- Next step
- Enrollment booked for the partner’s return.
- Due
- Jul 9
Decisions needed from you
Nothing needs your decision this month.
Next month
- Complete the last MFA enrollment
- Replace two out-of-warranty laptops
- July restore test (a mailbox)