What happens if exposure is found?

You get a clear summary of the exposure and the next steps to take. That might cover password resets, turning on MFA, account reviews, hardening Microsoft 365, staff awareness, supplier checks or ongoing monitoring.