NVISO is a pure-play cyber security consulting firm: our team is composed of security professionals who each have their specific field of expertise, ranging from Information Security Governance, Risk & Compliance to Incident Response, Penetration Testing, CSIRT/SOC, Software Security, and Training & Awareness. This fantastic blend of skills enables us to help organizations prevent, detect, and respond to complex security challenges. The project focuses on evaluating a Security-as-Code tool designed for assessing Microsoft 365 environments and Entra ID. The primary objective is to understand the deployment process, including its configuration and integration within existing systems. The project involves conducting a comprehensive analysis of the tool's functionalities, identifying its strengths and potential areas for improvement, performing a gap analysis by comparing the tool with another security assessment script, and determining areas where it excels and where enhancements might be necessary. Additionally, the project explores the implementation of custom controls within the Security-as-Code framework, delving into the technical aspects of the tool to understand how custom policies and controls can be developed and integrated. Collaboration with team members is essential to design and test these custom controls, ensuring they meet the team's specific security needs. Participants will gain experience in security assessment methodologies, Microsoft 365 and Entra ID features and architecture, and the customization of security solutions, contributing to the organization's security posture through automation.