IT staff propose Microsoft 365 security audit to prepare for potential government cloud migration

A staff member (speaker 6) outlined plans for a security audit of the city’s Microsoft 365 tenant to identify configuration gaps, align posture with CIS controls, and prepare for a potential move to the government/community cloud. “We have not done actual an audit of our our 3 65 tenant,” the staff member said, noting the audit would be voluntary now but potentially mandatory later.

The board discussed whether the work would be performed by an existing vendor and what compliance standards (FedRAMP, tenant controls) would apply; staff said they plan to engage subject-matter experts who can recommend remediation steps and prepare the tenant for any required migration. No formal action was taken; staff will pursue contracting options to complete the audit.