Provision of Safeguarder IT Solution

A new Microsoft 365 tenant is required to be created, dedicated solely to the Safeguarding function. The new Microsoft 365 tenant must have its own domain to provide a professional and consistent approach for Safeguarders. The new Microsoft tenant must be hardened from a security point of view making use of the Microsoft 365 Guidance for UK Government Secure Configuration Blueprint. This blueprint was designed in combination with the National Cyber Security Centre (NCSC), Microsoft, and the UK Government, and sets out several steps to configure a tenant to improve its security posture to a level suitable for handling and storing of government data.

The new tenant must also be configured to allow the Safeguarding users to bring their own device (BYOD), but have controls in place that guard against data exfiltration and provide robust security and authentication measures.