Skip to content
Microsoft & Cloud

Microsoft Security in Saudi Arabia: Identity, Defender and Managed Security

iPower deploys and manages identity & access management and Microsoft Defender for your Microsoft 365 and Azure environment, then keeps them configured under clear SLAs.

Most organizations already pay for strong security features in Microsoft 365 and Azure, but only use part of them. Multi-factor authentication is enforced for some users, conditional access policies are incomplete, and Defender runs on default settings. iPower closes that gap. We review what your licenses include, configure identity and access controls and Microsoft Defender, document every change, and can manage the settings for you afterwards. Because we also supply and renew your Microsoft licenses, we see licensing and security as one picture.

1The problem we solve

  • Microsoft 365 rolled out, but MFA and conditional access only partly enforced.
  • Microsoft Defender licensed as part of a bundle, yet never fully configured or watched.
  • Admin and privileged accounts with more access than they need, and no regular review.
  • Security settings spread across several Microsoft portals with no single owner.
  • Auditors asking for evidence of identity and endpoint controls that is hard to produce.

2Scope of work and what you receive

  • Identity & access management

    Single sign-on, multi-factor authentication, conditional access and privileged account controls for your Microsoft environment.

  • Microsoft Defender

    Deployment and configuration of Defender protection for endpoints, email and collaboration within your licensing.

  • Microsoft 365 security settings

    Review and hardening of tenant security settings, with clear documentation of what was changed.

  • Professional services

    Planning, deployment and configuration by engineers who also supply and license your Microsoft products.

  • Managed Microsoft security

    Ongoing management of identity and Defender settings under an SLA, with regular reviews and reporting.

What you receive at handover

  • Assessment of identity, Defender and Microsoft 365 security settings
  • Agreed configuration plan, prioritized by risk
  • Configured identity and access controls and Microsoft Defender policies
  • Documentation of every change, ready for audit

3Support and maintenance after delivery

  • Managed Microsoft security under an SLA
  • Regular reviews of accounts, policies and alerts
  • Licensing and renewal alignment with your Microsoft plans

Coverage and response times are set in your contract to match your needs. See also: Support & Maintenance, IT Outsourcing & Managed Services

Sectors we serve

  • Banking & finance

    Identity and endpoint controls for large, regulated user bases.

  • Government & semi-government

    Microsoft security configured for public-sector entities and their requirements.

  • Healthcare

    Protection for clinical and office users who share sensitive data.

  • Enterprise & telecom

    Consistent controls across head offices, branches and remote staff.

Saudi regulatory alignment

Where the Saudi frameworks you are measured against apply to your organization, we take them into account when configuring Microsoft security:

NCA Essential Cybersecurity Controls (ECC-2:2024)

Mandatory for government entities, their affiliates and critical national infrastructure operators. Includes identity and access management and the protection of email and endpoints.

SAMA Cyber Security Framework

For banks and other SAMA-regulated institutions, including identity and access management expectations.

Personal Data Protection Law (PDPL)

Technical safeguards that support your obligations to protect personal data.

iPower supports the technical controls and evidence; formal compliance remains the responsibility of your organization and is confirmed by the relevant regulator or auditor.

Technology brands we supply and support

  • Microsoft

Why iPower

  • Licensing and security together

    We supply your Microsoft licenses, so we configure what you already pay for before recommending more.

  • From setup to management

    The same team deploys the controls and can manage them for you afterwards.

  • Local teams

    Offices in Jeddah and Riyadh serving organizations across the Kingdom.

  • Serving leading Saudi banks
  • Delivery across every region
  • Support long after handover

Frequently asked questions

We already have Microsoft 365 E3 or E5. Do we need more licenses?

Often not at first. Many security features are included in the plans you own but are not fully configured. We review what your licenses include before recommending anything new.

Can you manage Microsoft security for us after setup?

Yes. Managed Microsoft security covers ongoing management of identity and Defender settings under an agreed SLA, with regular reviews.

Where should we start?

With a Microsoft security assessment: we review identity and access, Defender coverage and Microsoft 365 security settings, then give you the gaps and a roadmap.

Not sure how well your Microsoft environment is protected?

Book a Microsoft security assessment. We will review identity, Defender and Microsoft 365 settings and show you the gaps.

Request a quote