Read-only Microsoft 365 tenant assessment that produces a control-by-control gap map against ISO 27001 Annex A. Assessment data lives in your SharePoint — never leaves the tenant.