What's the difference between a Sprint and an Assessment?
A Sprint makes changes and delivers a working configuration. An Assessment reviews the environment and delivers findings plus a remediation roadmap.
Frequently Asked Questions
Common questions about Microsoft 365 security sprints and assessments.
How long does a sprint take?
Most sprints run 2-4 weeks. Assessments run 3-6 weeks depending on scope. The Security Configuration Health Check is one day.
Do you need Global Admin access to run a sprint?
For most sprint engagements, yes, at least temporarily. Access is scoped, documented, and revoked at engagement close.
Do you offer retainers or ongoing support?
Yes, through Fractional IT Management. Sprints and assessments remain fixed scope and fixed price, but organizations that need ongoing Microsoft 365 IT ownership can use a monthly management engagement with a defined cadence, backlog, and reporting rhythm.
What is Fractional IT Management?
Fractional IT Management is ongoing Microsoft 365-focused IT and security management for organizations that need senior IT ownership but do not need a full-time IT Director. It removes recurring roadmap, security backlog, Secure Score, vendor follow-up, audit readiness, and reporting burden from the internal IT team so important work stops losing to daily tickets.
How do you use Microsoft Secure Score?
Microsoft Secure Score is used as one useful signal of how thoroughly the Microsoft 365 environment is configured and secured. Actions are prioritized by real risk reduction, effort, licensing, and user impact.
How is Fractional IT Management priced?
Pricing uses a monthly base fee plus a per-employee fee based on tenant size, operating cadence, vendor complexity, and the size of the IT/security backlog. Larger implementation projects are scoped separately as fixed-price sprints.
Do you work with MSPs?
Yes. Creative Data Concepts works with MSPs that need Microsoft 365 security hardening capacity for their clients.