Question 1

What checklists does CNEXT provide for Microsoft 365 projects?

Accepted Answer

CNEXT checklists: SharePoint Governance Checklist (50 items), SharePoint Intranet Launch Checklist (40 items), Copilot Readiness Checklist (40 items), Power Platform Governance Checklist (35 items), Microsoft 365 Security Hardening Checklist (60 items), Teams Governance Checklist (30 items) and SharePoint Migration Checklist (45 items). All free, downloadable as Excel.

Question 2

What is in the SharePoint Governance Checklist?

Accepted Answer

Covers: site creation policy, naming conventions, permission model (group-based), external sharing settings, content lifecycle (expiry, archive, delete), Teams/SharePoint lifecycle alignment, Sensitivity Label deployment, retention policy design, guest access review, search governance and SharePoint Admin Centre security settings. RAG status per item.

Question 3

What is the Copilot Readiness Checklist?

Accepted Answer

The Copilot Readiness Checklist assesses M365 tenant readiness for Microsoft 365 Copilot and Copilot Studio agents. 40 items across: SharePoint permissions (oversharing risk), search configuration, Sensitivity Label coverage, content quality, DLP policies, Entra ID security, licensing readiness and governance. Scores 0–100 with actionable recommendations.

Question 4

What is in the Security Hardening Checklist?

Accepted Answer

The Microsoft 365 Security Hardening Checklist (60 items) covers: Entra ID (Conditional Access, MFA, PIM, SSPR), Defender for Endpoint (onboarding, policies), Defender for Office 365 (anti-phishing, safe links, safe attachments), Purview (Sensitivity Labels, DLP, retention), SharePoint sharing settings, Teams security settings and guest access controls.

Question 5

Can checklists be used for a Microsoft 365 audit?

Accepted Answer

Yes. CNEXT uses these checklists as the basis for Microsoft 365 health checks and security audits. A completed checklist gives a clear picture of current compliance status and identifies priority remediation items. CNEXT offers a facilitated 1-day audit workshop (CHF 2,400) that walks through all applicable checklists with client IT staff.

Question 6

Are checklists available as Teams/SharePoint templates?

Accepted Answer

Yes. The most popular CNEXT checklists are available as SharePoint List templates – importable directly into a SharePoint site via the CNEXT site provisioning script. Each item has: description, guidance text, responsible person, status (Not Started/In Progress/Complete) and notes field. Power BI dashboard for overall completion tracking.

Question 7

Does CNEXT have a checklist for Teams governance?

Accepted Answer

Yes. The CNEXT Teams Governance Checklist covers: Teams creation policy (who can create), naming convention, expiry/lifecycle policy, guest access settings, external sharing, private channel policies, Teams compliance recording settings, DLP for Teams, retention policies for Teams chat and Microsoft Purview Communication Compliance setup.

Question 8

Is there a checklist for Replit Enterprise security?

Accepted Answer

Yes. The CNEXT Replit Enterprise Security Checklist covers: SSO configuration (Entra ID), RBAC setup, Private Deployments (custom domain, SSL), Audit Log activation and export, Secret Management (no secrets in code), IP Whitelisting, Outbound Connections (allowlist), and production deployment checklist (HTTPS, logging, monitoring, FADP compliance).

Question 9

Can organisations customise CNEXT checklists for their internal standards?

Accepted Answer

Yes. CNEXT checklists are distributed as Excel files – customise freely to add internal standards, mark items as N/A for your context, or adjust RAG thresholds. If you want a customised checklist workshop (CNEXT works through the checklist with your team and provides remediation recommendations), contact CNEXT for a facilitated audit session (CHF 2,400/day).

Question 10

How often are CNEXT checklists updated?

Accepted Answer

CNEXT reviews and updates checklists twice per year (spring and autumn) to incorporate: new Microsoft 365 feature releases, changes to Swiss regulatory requirements (FADP guidance, FINMA circulars), updates to Microsoft security baselines and lessons learned from client projects. Each checklist carries a version number and update date.

Checklist Generator

Project

Infrastructure

Licences