TrueNorth Data Shield · Microsoft 365 Exposure & Copilot Readiness

Kahala Dental Group (demo)

Scanned 2026-10-10T18:00:00+00:00 · 14 sites
F
Score 14/100
3Items with "Anyone" links
2Shared org-wide
2/3Stale guests
6Global admins

Copilot readiness

Not ready. Copilot can surface anything a user already has access to. Resolve the critical and high items below before enabling or expanding Copilot. (5 Copilot licence(s) currently assigned.)

Findings and fixes

critical · 2

Sensitive-looking files open to anyone with the link

"Anyone" links need no sign-in. If forwarded or posted, the file is public. These names suggest HR, finance or legal content.
Fix: Remove the Anyone link or replace it with a 'Specific people' link today.
Office/HR/Payroll 2026.xlsxanonymous
Office/HR/Onboarding/Staff SSN list.docxanonymous
critical · 1

Guest accounts hold admin roles

An outside identity can administer the tenant.
Fix: Remove admin roles from guest accounts immediately.
Former IT MSPtech_priormsp.com#EXT#@kahaladental.onmicrosoft.comuser
high · 3

Files and folders shared with "Anyone" links

Anyone links bypass sign-in and audit attribution.
Fix: Review each link; set tenant default link type to 'Specific people' and require expiry (SharePoint admin center > Policies > Sharing).
Office/HR/Payroll 2026.xlsxanonymous
Office/HR/Onboarding/Staff SSN list.docxanonymous
Marketing/Spring flyer.pdfanonymous
high · 1

Tenant allows "Anyone" sharing

The organization-level setting permits unauthenticated links everywhere.
Fix: Lower SharePoint external sharing to 'New and existing guests' unless there is a business need.
high · 6

6 Global Administrators

Microsoft recommends fewer than five; each one is a full-tenant compromise path.
Fix: Reduce to 2-4 break-glass/named admins; move others to least-privilege roles.
Office Manageroffice@kahaladental.com
Dr Leedr@kahaladental.com
Front Deskfront@kahaladental.com
IT Adminit@kahaladental.com
Old Adminold@kahaladental.com
Backup Adminbackup@kahaladental.com
medium · 2

Anyone links that never expire

Links without expiry stay live indefinitely after the project ends.
Fix: Set 'These links must expire within N days' (30 recommended).
Office/HR/Payroll 2026.xlsxanonymous
Office/HR/Onboarding/Staff SSN list.docxanonymous
medium · 2

Content shared with everyone in the organization

Copilot answers from anything a user can reach. Organization-wide links make these files discoverable to every employee through Copilot and search.
Fix: Narrow to the team or people who need it; prioritise anything sensitive.
Leadership/Acquisition notesorganization
Leadership/Finance/Budget FY27.xlsxorganization
medium · 1

Files shared directly with outside email addresses

External people retain access until it is removed.
Fix: Confirm each outside party still needs access; remove the rest.
Office/Insurance contracts
medium · 2

Guest accounts inactive for 90+ days

Old guest accounts keep whatever access they were given.
Fix: Remove or run an Entra access review for these guests.
Old Contractorj@oldvendor.com645last sign-in
Former IT MSPtech@priormsp.com1258created (no sign-in data)

Scan notes