The Architecture

One stack.
Six layers.
One outcome.

AnchorOne is a single governed architecture built entirely on Microsoft. AnchorOne operates the environment. Organizations operate within it. Every layer is defined, monitored, and reported on — the same way, for every organization inside it, without variation.

AnchorOne Governed Stack
AnchorOne Governed
01
Identity & Access
Microsoft Entra ID
The foundation. Every access request evaluated against policy before anything else happens.
30/30
02
Device Management
Microsoft Intune
Every endpoint enrolled, compliant, and managed before access is granted.
20/20
03
Security Operations
Microsoft Defender
Continuous monitoring across every surface. Threats contained to defined SLAs.
25/25
04
Email Security
Defender for O365
Advanced protection against phishing, impersonation, and data loss on every mailbox.
15/15
05
Backup & Recovery
M365 Backup
Daily immutable backups of all M365 workloads. Tested quarterly. Recovery SLAs defined.
7/10
06
Documentation
Audit-Ready by Design
Complete, current documentation of every environment. Always ready for auditors and carriers.
3/10
Client environment
Physical infrastructure
Business applications
Network hardware
End users
Identity & Access
Active
Identity & Access
Microsoft Entra ID
The foundation of the entire stack. Before any user accesses any resource, their identity is evaluated against conditional access policies. MFA is enforced for every account — no bypass accounts, no exemptions for tenure or title. Shared accounts are prohibited. Every access event is logged.
What the standard includes
MFA required for every user
Conditional access on every request
Privileged identity management
Passwordless authentication
Identity risk monitoring
Domain Weight
30 / 30
System Boundary

What AnchorOne
governs.

The boundary is explicit. Everything above the line is governed by AnchorOne — uniformly, continuously, without exception. Everything below it remains in the client's hands.

AnchorOne Governed
Everything above this line operates under the standard.
Identity & Access
Entra ID
Device Management
Intune
Security Operations
Defender
Email Security
Defender O365
Backup & Recovery
M365 Backup
Documentation
Audit-Ready
System Boundary
Client Responsibility Below
Client Environment — Outside the Standard
Physical infrastructure
Business applications
Network hardware
Operational workflows
Third-party integrations
Monthly Reporting

The score is
the proof.

Every organization inside AnchorOne receives a monthly score. Every domain. Every control. Measured against the standard automatically — not assembled manually when someone asks for it.

If the standard is holding, the score reflects it. If something drifts, the score shows it — before an insurer, auditor, or incident does.

AnchorOne Score
March 2026
100
/ 100
Standard Active
Henderson & Associates
All domains current · No gaps identified
Identity & Access
30/30
Device Management
20/20
Security Operations
25/25
Email Security
15/15
Backup & Documentation
10/10
Start Here

See where your
environment stands.

The AnchorOne Score measures your current environment against the standard across all six domains. Seventeen questions. Immediate results. A branded report with your organization's name on it.