Sample report · fictional company
Entra ID Audit Sample Report: See Every Page Before You Book
This is the report pack an Entra ID audit produces, shown for Veltrana Logistics, a fictional company with 218 users. All names and figures are illustrative. Real client reports are confidential and never published.
25+ yearsIT & cybersecurity experience
Certified expertsCISSP · C|CISO · Microsoft · Cisco
Southern CaliforniaLocal and on-site, based in Irvine
NationwideRemote audits & advisory
Schedule a consultationPage by page
Walk through the sample report pack
Pick a page on the left. Each is shown as it appears in the Word and PDF reports.
OC Security Audit · Veltrana Logistics · ConfidentialSAMPLE
The report pack
Word and PDF, in the OC Security Audit format
MICROSOFT ENTRA ID
Executive Security Report
Veltrana Logistics
Report date June 30, 2026
Prepared by Ali Hassani, C|CISO, CISSP
Report date June 30, 2026
Prepared by Ali Hassani, C|CISO, CISSP
SAMPLE
MICROSOFT ENTRA ID
Technical Security Configuration Report
Veltrana Logistics
Report date June 30, 2026
Prepared by Ali Hassani, C|CISO, CISSP
Report date June 30, 2026
Prepared by Ali Hassani, C|CISO, CISSP
SAMPLE
MICROSOFT ENTRA ID
Identity Threat & Sign-in Analysis
Veltrana Logistics
Report date June 30, 2026
Prepared by Ali Hassani, C|CISO, CISSP
Report date June 30, 2026
Prepared by Ali Hassani, C|CISO, CISSP
SAMPLE
MICROSOFT ENTRA ID
Risk Register
Veltrana Logistics
Report date June 30, 2026
Prepared by Ali Hassani, C|CISO, CISSP
Report date June 30, 2026
Prepared by Ali Hassani, C|CISO, CISSP
SAMPLE
MICROSOFT ENTRA ID
Next Steps & Security Roadmap
Veltrana Logistics
Report date June 30, 2026
Prepared by Ali Hassani, C|CISO, CISSP
Report date June 30, 2026
Prepared by Ali Hassani, C|CISO, CISSP
SAMPLE
SAMPLE · FICTIONAL COMPANY · ILLUSTRATIVE DATA
OC Security Audit · Veltrana Logistics · ConfidentialSAMPLE
Executive Security Report
Microsoft Entra ID security assessment · report date June 30, 2026
Needs attention. 41 findings across 8 areas; 12 business risks; 30 days of sign-ins reviewed (7,412 sign-ins, 486 admin changes).
4Critical
11High
17Medium
9Low
Score by area (target 80)
SAMPLE · FICTIONAL COMPANY · ILLUSTRATIVE DATA
OC Security Audit · Veltrana Logistics · ConfidentialSAMPLE
Identity Threat & Sign-in Analysis
30 days of interactive, non-interactive and service-principal sign-ins, plus directory audit logs
Sign-ins per day, last 30 days
Attack chain found in the logs
3 sourcessprayed passwords at 38 accounts over two days
→
2 accountssigned in successfully from a spraying source
→
4 promptsdenied in a row on one account (MFA fatigue)
→
1 sign-infrom a second country within 3 hours (impossible travel)
SAMPLE · FICTIONAL COMPANY · ILLUSTRATIVE DATA
OC Security Audit · Veltrana Logistics · ConfidentialSAMPLE
Technical Security Configuration Report
Finding detail · Privileged Access
CriticalSeven accounts hold Global Administrator permanently; two have no MFA registered
| Observation | 7 permanent Global Administrators (target 2–4, eligible through PIM). 2 of them have never registered an MFA method. |
| Impact | One stolen password on these accounts gives full control of mail, files, users and billing. |
| Recommendation | Reduce to 2–4, make the rest eligible in PIM, require phishing-resistant MFA for all admin roles. |
| Affected | 7 accounts (listed in the workbook) |
| Frameworks | NIST CSF 2.0 PR.AA · ISO 27001:2022 A.5.15, A.8.2 · CIS M365 |
SAMPLE · FICTIONAL COMPANY · ILLUSTRATIVE DATA
OC Security Audit · Veltrana Logistics · ConfidentialSAMPLE
Risk Register
12 business risks, scored likelihood × impact, with owners and target dates
Likelihood (rows) × impact (columns)
1
2
3
2
1
2
1
| Business risk (SAMPLE) | Score |
|---|---|
| Account takeover through password spray | 20 |
| Misuse of standing admin access | 20 |
| Data access through a risky app consent | 16 |
| Guest access nobody reviews | 12 |
SAMPLE · FICTIONAL COMPANY · ILLUSTRATIVE DATA
OC Security Audit · Veltrana Logistics · ConfidentialSAMPLE
Next Steps & Security Roadmap
Phased actions from 0–7 days to 180 days
Phase 0 · 0–7 days
Remove standing Global Admins, register MFA for admins
Phase 1 · 7–30 days
Block legacy authentication, MFA for all users
Phase 1 · 7–30 days
Restrict user consent to apps; review app grants
Phase 2 · 30–90 days
Risk-based Conditional Access; guest reviews
Phase 3 · 90–180 days
Phishing-resistant MFA; access review cycle
Week 0Week 4Week 8Week 16+
SAMPLE · FICTIONAL COMPANY · ILLUSTRATIVE DATA
OC Security Audit · Veltrana Logistics · ConfidentialSAMPLE
Technical Findings Workbook (Excel)
Findings tracker your IT team or MSP works from
| Ref | Severity | Area | Status | Owner |
|---|---|---|---|---|
| PA-02 | Critical | Privileged Access | Open ▾ | IT lead |
| IA-03 | Critical | Identity & Authentication | Open ▾ | IT lead |
| CA-04 | High | Conditional Access | In progress ▾ | MSP |
| AP-02 | High | Applications & Consent | Open ▾ | MSP |
| EC-05 | Medium | External Collaboration | Planned ▾ | Office mgr |
| MT-01 | Medium | Monitoring | Open ▾ | MSP |
Live formulas, drop-downs and charts · one row per finding · reference numbers illustrative
SAMPLE · FICTIONAL COMPANY · ILLUSTRATIVE DATA
OC Security Audit · Veltrana Logistics · ConfidentialSAMPLE
Remediation Progress Report
Follow-up audit compared with the first audit
→
| Key measure | Then | Now |
|---|---|---|
| Users with MFA registered | 71% | 94% |
| Global Administrators | 7 | 3 |
| Successful sign-ins from attacking sources | 2 | 0 |
| Findings resolved / still open / new | — | 29 / 12 / 3 |
SAMPLE · FICTIONAL COMPANY · ILLUSTRATIVE DATA
What you receive
Seven deliverables, one fixed price
| Deliverable | What it contains | Who uses it |
|---|---|---|
| Executive Security Report | Score, top business risks, what is working, priority decisions for leadership | Owners, executives |
| Technical Security Configuration Report | Every finding with evidence, impact, fix steps and NIST / ISO / CIS mapping | IT team, MSP |
| Identity Threat & Sign-in Analysis | 30 days of sign-in and audit logs reviewed for attacks, with charts and an attack chain | IT, security, leadership |
| Risk Register | Business risks scored likelihood × impact, heat maps, owners and target dates | Leadership, compliance |
| Next Steps & Security Roadmap | Phased actions and projects from 0–7 days to 180 days | IT team, leadership |
| Technical Findings Workbook (Excel) | Findings tracker with formulas, drop-downs and charts | IT team, MSP |
| Remediation Progress Report (follow-up audit) | Before-and-after score, resolved, still-open and new findings | Leadership, insurers |
Every report comes as Word and PDF. The Remediation Progress Report comes with a follow-up audit.
How the sample was made
The sample comes from the same audit tool we use for clients, run against a built-in synthetic tenant for a fictional company. No real tenant is signed in to, and no client data is used on this page or anywhere on this site.
