

This could be a growth opportunity but you have to put your management hat on. You’re one person with part time help. You need more resources which will come in the form of contractors and consultants. To get these you need a plan of what has to be done and how it drives value to the business. Financial risk is going to be a big driver for most businesses.
First thing is you need actionable intelligence. You want to assess the state of things, figure out what kind of risks exist and do business impact assessments on the most severe issues. This is what leadership needs to authorize budget. Your CEO having global adminis not a business problem. Over permissive permissions that could lead to a compromise that causes a regulatory penalty is. Things have to tie to money.
Microsoft has a pile of assessments you can run here:
https://learn.microsoft.com/en-us/assessments/
Fixing M365 sounds like a priority. Getting help doing a CIS assessment wouldn’t be a bad idea either. Using cybersecurity as a driver for change works very well because you surface a lot of risk.
If they want you to grow into a senior or manager role then don’t be everything guy, delegate. It sounds like there’s lots of higher value stuff to attack if you can convince leadership to let you offload some tasks.

















deleted by creator