AlertControl for the financial controller: insight into access and changes
As a controller you want to be able to show that access to systems and data is under control. AlertControl for Microsoft 365 shows who signs in, who received which admin role, which accounts lack MFA and which accounts have not been used for a long time. The Audit Log shows for every change who did what and when. AlertControl can only read; it changes nothing.
Updated 2 November 2026
Making access management demonstrable
Auditors increasingly ask how users and rights are managed. AlertControl shows for each user the MFA status, last sign-in and last password change, and flags accounts unused for more than 90 days. That quickly shows where access management falls short.
Who changed what?
The Microsoft Entra ID Audit Log shows changes to users, groups, roles and applications, with who did it, when and exactly what changed. The Events from the unified audit log show, among other things, changes to mailbox permissions, inbox rules and shared files.
Sensitive data
Does your organisation have DLP policies in Microsoft Purview, for example for bank account or citizen service numbers? Then AlertControl shows the DLP matches: which policy and rule, who was involved and which file or email. That shows whether sensitive data leaves the organisation.
A note of caution
AlertControl supports your controls but does not replace them. It shows what happens in Microsoft 365; policies, procedures and their assessment remain your responsibility. Retention follows Microsoft: sign-ins and the Audit Log up to 30 days, Events and DLP up to 7 days in AlertControl.
Frequently asked questions
Yes. With the Security Reader role you see everything. With Reports Reader you see sign-ins, the Audit Log and Users & MFA. Neither role can change anything.
Sign-ins and the Audit Log up to 30 days, Events and DLP up to 7 days. That follows Microsoft's retention periods.
No. The logs are fetched live from Microsoft and not stored by AlertControl. We only keep who signed in and when, and the AI advice that was requested.
See for yourself what is happening in your Microsoft 365?
Try AlertControl free for 30 days. You sign in with your Microsoft account and grant read-only consent once.