No assessment loadedImport a Health Check v2 assessment to populate this section.
15
30-Day Remediation Plan
Urgent and scheduled improvement actions.
No assessment loadedImport a Health Check v2 assessment to populate this section.
16
90-Day Improvement Plan
Longer-term capability uplift and governance.
No assessment loadedImport a Health Check v2 assessment to populate this section.
17
Risk Acceptance
Formal, time-bound acceptance of residual business risk by the authorised client risk owner.
Governance ruleRisk acceptance does not remove the risk. Record impact, deferral reason, compensating controls, residual risk, owner, expiry and review dates. Expired acceptance must reopen the finding.
18
Detailed Technical Evidence
Filterable control register and evidence.
No assessment loadedImport a Health Check v2 assessment to populate this section.
19
Formal Sign-off
Accountability, segregation of duties and closure approvals aligned to the SOP.
Segregation of dutiesThe assessment engineer cannot accept client business risk. If the engineer also remediates, another authorised team leader validates closure evidence. Production changes require approved change records.
Outcome and approval fields
Technical and operational approval
Team Leader
Signature / date
Technical Operations Manager
Signature / date
Account Executive
Signature / date
Client Technical Owner
Signature / date
Client Business Owner
Signature / date
Closure criteria
Import Health Check v2 assessment
Select all four output files from one assessment run.
Local and privateFiles and entered values are held only in memory for this open page. Nothing is uploaded, transmitted or fetched from the network, and all temporary data is cleared on refresh or when the page is closed.
Drop the four assessment files here or choose them from the same Health Check v2 output folder
HealthCheck.htmlClient, tenant and assessment timestamp
Not selected
Required
Findings.csvRAG controls, actions, owners and evidence
Not selected
Required
DataCollection.csvCollection status and record counts
Not selected
Required
ApplicationCredentials.csvApplication secrets and certificates
Not selected
Required
Validation performed before import
All four v2 output files are present and recognisable.
CSV headers match the expected Health Check v2 schema.
Findings use valid Red, Amber or Green status values.
Credential rows contain a numeric DaysRemaining value.
HealthCheck.html contains a client name; missing tenant or timestamp is reported as a warning.
Generated from M365 Health Check v2 outputs · Read-only Microsoft Graph assessment · Confidential