{"id":11981,"date":"2026-06-03T09:11:08","date_gmt":"2026-06-03T06:11:08","guid":{"rendered":"https:\/\/aboveit.fi\/?p=11981"},"modified":"2026-06-03T09:28:46","modified_gmt":"2026-06-03T06:28:46","slug":"managed-microsoft-365-cloud","status":"publish","type":"post","link":"https:\/\/aboveit.fi\/en\/managed-microsoft-365-cloud\/","title":{"rendered":"Minimum Information Security Level for SMEs in the Age of Artificial Intelligence"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

What constitutes the minimum level of information security for SMEs in the age of AI?<\/em> Artificial intelligence has already significantly transformed the information security landscape, and its impact continues to grow. Attacks are more sophisticated, more targeted, and easier to execute than before. In this blog post, I examine what information security looks like today and what challenges the rapidly changing operating environment brings to organizations. In August, we will also be hosting a webinar on this topic, where my colleague Matias Haapaniemi and I will delve deeper into the subject. Register for the webinar here<\/a>.<\/strong><\/em><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

How AI is changing the threat landscape in cybersecurity<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The threats facing organizations are no longer just random malware or generic phishing messages. Attackers leverage artificial intelligence to research target organizations, tailor messages, create voice and video scams, and identify vulnerabilities. <\/p>\n

Despite all the hype, the majority of attacks still rely on familiar weaknesses: unpatched systems, weak authentication, unmonitored logs, and deficiencies in practices within the organization and its stakeholders. When cybersecurity fundamentals are in order, an organization still has strong prerequisites for effective protection. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Cybersecurity legislation and EU regulation as the foundation of information security<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Regardless of industry, companies are increasingly technology companies. Core business pillars rely heavily on information technology; if IT fails, business continuity is often jeopardized. Despite this, the IT industry itself remains relatively lightly regulated. Compare this to the pharmaceutical industry, for example, where even individual small processes are strictly supervised. <\/p>\n

If you ask me, the IT industry should have minimum cybersecurity requirements regardless of organization size and criticality. Requirements such as NIS2 would establish a baseline upon which every organization could build its own protection and preparedness for various cybersecurity incidents. <\/p>\n

EU regulation has been criticized for weakening the competitiveness of member state companies. I see it the opposite way: well-structured regulation strengthens business continuity and increases organizational resilience in various disruption scenarios, thereby providing a competitive advantage. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Minimum Information Security Level for SMEs<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The minimum level of cybersecurity for an SME doesn’t necessarily mean a heavy governance model or extensive investments, but rather a few critical practices that must genuinely be in order. The minimum level includes up-to-date patches, multi-factor authentication, adequate logging and monitoring, managed access rights, functional backups, basic change management, and staff ability to recognize the most common scams and respond to various incident scenarios. <\/p>

The minimum objective does not need to be complete protection, but rather a baseline level that significantly reduces the most likely risks and ensures that the organization can continue operations even during disruptions. Unsure whether your fundamentals are in order? Let’s talk for 15 minutes and assess the situation together. Book a time from our calendar!<\/a><\/strong><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Update management as part of processes<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Most exploited vulnerabilities have been patchable for months before attack waves. For an SME, a clear rhythm is sufficient: workstations and servers on an automatic update cycle, external services and network devices on regular review, and a separate handling process for critical vulnerabilities. What is essential is that there is an agreed functional process for updates and a clear responsible party to oversee it. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Logging and monitoring to increase visibility<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Logs do not help if no one monitors them. For an SME, the minimum level means that logs from key systems such as Microsoft 365, Entra ID, network devices, and endpoint protection are collected in one place. Anomalies generate alerts that are responded to with appropriate methods. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Microsoft 365 Environment Hardening<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Microsoft 365 is one of the most important systems for most organizations and a common target for attacks. Default settings are not sufficient to protect the environment, nor does the license level automatically elevate security. The minimum level includes multi-factor authentication for all users without unnecessary exceptions, conditional access policies to restrict unrecognized or high-risk sign-ins, blocking legacy authentication, etc. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Remember change management too<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

In an SME, change management does not mean a heavy ITIL model, but rather knowing what changes in the environment, who made the change, and on what basis. The minimum requirement is that significant changes, such as access rights, firewall rules, and integrations, go through an agreed channel, making them documented. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Partner and Vendor Assessment<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Attacks through partners and vendors have become more common. When access to one environment is successful, the attacker often attempts to progress through it to other targets. Therefore, an organization should maintain an up-to-date list of partners who have access to its systems or data, and ensure that contracts define at least the key cybersecurity requirements and the obligation to report incidents without delay. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Understanding your own IT environment and data<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

You cannot protect what you do not know you own. Up-to-date visibility into systems in use, applications, user accounts, and data location and criticality is a fundamental prerequisite for cybersecurity. Particular attention should be paid to where business-critical information is located, who has access to it, and how it is protected regardless of environment. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Staff Cybersecurity Training<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Technical controls alone are not sufficient if staff do not recognize risks in their daily work. The minimum level includes regular and practical cybersecurity training, where staff learn to better recognize phishing messages, other scam attempts, and incident scenarios, and know how to report them quickly. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Summary: the foundation of information security in the age of AI<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

A strong cybersecurity posture does not mean expensive investments or heavy processes. A solid foundation is built on managed access rights, up-to-date patches, functional monitoring, and staff ability to recognize risks in their daily work. In the age of AI, threats are evolving faster than before, but the foundation of cybersecurity remains the same: know your environment, protect the most critical points, and ensure that the fundamentals are genuinely in order. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Above IT serves as a valuable resource for IT departments, empowering your organization’s IT professionals to stay at the forefront of cybersecurity development and maintenance! Follow us!<\/a><\/strong><\/em><\/p><\/blockquote>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

Artificial intelligence has already significantly transformed the cybersecurity landscape, and its impact continues to grow. Attacks are more sophisticated, more targeted, and easier to execute than before.<\/p>\n","protected":false},"author":2,"featured_media":11998,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"content-type":"","inline_featured_image":false,"footnotes":""},"categories":[254,218],"tags":[219,501],"class_list":["post-11981","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-above-it","category-cybersecurity","tag-cybersecurity","tag-development"],"yoast_head":"\nMinimum Security Level in the Age of AI | Above IT Oy<\/title>\n<meta name=\"description\" content=\"Minimum cybersecurity level for SMEs in the age of AI: clear policies and responsibilities, partner risks under control, and Microsoft 365 in order.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/aboveit.fi\/en\/managed-microsoft-365-cloud\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Minimum Security Level in the Age of AI | Above IT Oy\" \/>\n<meta property=\"og:description\" content=\"Minimum cybersecurity level for SMEs in the age of AI: clear policies and responsibilities, partner risks under control, and Microsoft 365 in order.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/aboveit.fi\/en\/managed-microsoft-365-cloud\/\" \/>\n<meta property=\"og:site_name\" content=\"Above IT Oy\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/aboveitfi\" \/>\n<meta property=\"article:published_time\" content=\"2026-06-03T06:11:08+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-06-03T06:28:46+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/aboveit.fi\/wp-content\/uploads\/2026\/06\/Designer-5.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1512\" \/>\n\t<meta property=\"og:image:height\" content=\"1040\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Mika Hakkarainen\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Mika Hakkarainen\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/managed-microsoft-365-cloud\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/managed-microsoft-365-cloud\\\/\"},\"author\":{\"name\":\"Mika Hakkarainen\",\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/#\\\/schema\\\/person\\\/042286daab0cbba998398a365b01589d\"},\"headline\":\"Minimum Information Security Level for SMEs in the Age of Artificial Intelligence\",\"datePublished\":\"2026-06-03T06:11:08+00:00\",\"dateModified\":\"2026-06-03T06:28:46+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/managed-microsoft-365-cloud\\\/\"},\"wordCount\":987,\"publisher\":{\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/managed-microsoft-365-cloud\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/aboveit.fi\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/Designer-5.jpg\",\"keywords\":[\"cybersecurity\",\"Development\"],\"articleSection\":[\"Above IT\",\"Cybersecurity\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/managed-microsoft-365-cloud\\\/\",\"url\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/managed-microsoft-365-cloud\\\/\",\"name\":\"Minimum Security Level in the Age of AI | Above IT Oy\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/managed-microsoft-365-cloud\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/managed-microsoft-365-cloud\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/aboveit.fi\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/Designer-5.jpg\",\"datePublished\":\"2026-06-03T06:11:08+00:00\",\"dateModified\":\"2026-06-03T06:28:46+00:00\",\"description\":\"Minimum cybersecurity level for SMEs in the age of AI: clear policies and responsibilities, partner risks under control, and Microsoft 365 in order.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/managed-microsoft-365-cloud\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/aboveit.fi\\\/en\\\/managed-microsoft-365-cloud\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/managed-microsoft-365-cloud\\\/#primaryimage\",\"url\":\"https:\\\/\\\/aboveit.fi\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/Designer-5.jpg\",\"contentUrl\":\"https:\\\/\\\/aboveit.fi\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/Designer-5.jpg\",\"width\":1512,\"height\":1040,\"caption\":\"Minimum Information Security Level for SMEs in the Age of Artificial Intelligence\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/managed-microsoft-365-cloud\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Etusivu\",\"item\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/it-management-resource-partner\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Minimum Information Security Level for SMEs in the Age of Artificial Intelligence\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/\",\"name\":\"We Are Above IT\",\"description\":\"Tietohallinnon voimavarakumppani\",\"publisher\":{\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/#organization\",\"name\":\"Above IT Oy\",\"url\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/aboveit.fi\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/aboveIT-logo.png\",\"contentUrl\":\"https:\\\/\\\/aboveit.fi\\\/wp-content\\\/uploads\\\/2024\\\/10\\\/aboveIT-logo.png\",\"width\":1613,\"height\":383,\"caption\":\"Above IT Oy\"},\"image\":{\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/aboveitfi\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/aboveitfi\",\"https:\\\/\\\/instagram.com\\\/aboveitfi\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/#\\\/schema\\\/person\\\/042286daab0cbba998398a365b01589d\",\"name\":\"Mika Hakkarainen\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a524f3c964200b71dc33386439da51c4b3f74947e2015c221f4c90e36fec5096?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a524f3c964200b71dc33386439da51c4b3f74947e2015c221f4c90e36fec5096?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a524f3c964200b71dc33386439da51c4b3f74947e2015c221f4c90e36fec5096?s=96&d=mm&r=g\",\"caption\":\"Mika Hakkarainen\"},\"sameAs\":[\"https:\\\/\\\/aboveit.fi\"],\"url\":\"https:\\\/\\\/aboveit.fi\\\/en\\\/author\\\/mika-hakkarainenaboveit-fi\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Minimum Security Level in the Age of AI | Above IT Oy","description":"Minimum cybersecurity level for SMEs in the age of AI: clear policies and responsibilities, partner risks under control, and Microsoft 365 in order.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/aboveit.fi\/en\/managed-microsoft-365-cloud\/","og_locale":"en_US","og_type":"article","og_title":"Minimum Security Level in the Age of AI | Above IT Oy","og_description":"Minimum cybersecurity level for SMEs in the age of AI: clear policies and responsibilities, partner risks under control, and Microsoft 365 in order.","og_url":"https:\/\/aboveit.fi\/en\/managed-microsoft-365-cloud\/","og_site_name":"Above IT Oy","article_publisher":"https:\/\/www.facebook.com\/aboveitfi","article_published_time":"2026-06-03T06:11:08+00:00","article_modified_time":"2026-06-03T06:28:46+00:00","og_image":[{"width":1512,"height":1040,"url":"https:\/\/aboveit.fi\/wp-content\/uploads\/2026\/06\/Designer-5.jpg","type":"image\/jpeg"}],"author":"Mika Hakkarainen","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Mika Hakkarainen","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/aboveit.fi\/en\/managed-microsoft-365-cloud\/#article","isPartOf":{"@id":"https:\/\/aboveit.fi\/en\/managed-microsoft-365-cloud\/"},"author":{"name":"Mika Hakkarainen","@id":"https:\/\/aboveit.fi\/en\/#\/schema\/person\/042286daab0cbba998398a365b01589d"},"headline":"Minimum Information Security Level for SMEs in the Age of Artificial Intelligence","datePublished":"2026-06-03T06:11:08+00:00","dateModified":"2026-06-03T06:28:46+00:00","mainEntityOfPage":{"@id":"https:\/\/aboveit.fi\/en\/managed-microsoft-365-cloud\/"},"wordCount":987,"publisher":{"@id":"https:\/\/aboveit.fi\/en\/#organization"},"image":{"@id":"https:\/\/aboveit.fi\/en\/managed-microsoft-365-cloud\/#primaryimage"},"thumbnailUrl":"https:\/\/aboveit.fi\/wp-content\/uploads\/2026\/06\/Designer-5.jpg","keywords":["cybersecurity","Development"],"articleSection":["Above IT","Cybersecurity"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/aboveit.fi\/en\/managed-microsoft-365-cloud\/","url":"https:\/\/aboveit.fi\/en\/managed-microsoft-365-cloud\/","name":"Minimum Security Level in the Age of AI | Above IT Oy","isPartOf":{"@id":"https:\/\/aboveit.fi\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/aboveit.fi\/en\/managed-microsoft-365-cloud\/#primaryimage"},"image":{"@id":"https:\/\/aboveit.fi\/en\/managed-microsoft-365-cloud\/#primaryimage"},"thumbnailUrl":"https:\/\/aboveit.fi\/wp-content\/uploads\/2026\/06\/Designer-5.jpg","datePublished":"2026-06-03T06:11:08+00:00","dateModified":"2026-06-03T06:28:46+00:00","description":"Minimum cybersecurity level for SMEs in the age of AI: clear policies and responsibilities, partner risks under control, and Microsoft 365 in order.","breadcrumb":{"@id":"https:\/\/aboveit.fi\/en\/managed-microsoft-365-cloud\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/aboveit.fi\/en\/managed-microsoft-365-cloud\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/aboveit.fi\/en\/managed-microsoft-365-cloud\/#primaryimage","url":"https:\/\/aboveit.fi\/wp-content\/uploads\/2026\/06\/Designer-5.jpg","contentUrl":"https:\/\/aboveit.fi\/wp-content\/uploads\/2026\/06\/Designer-5.jpg","width":1512,"height":1040,"caption":"Minimum Information Security Level for SMEs in the Age of Artificial Intelligence"},{"@type":"BreadcrumbList","@id":"https:\/\/aboveit.fi\/en\/managed-microsoft-365-cloud\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Etusivu","item":"https:\/\/aboveit.fi\/en\/it-management-resource-partner\/"},{"@type":"ListItem","position":2,"name":"Minimum Information Security Level for SMEs in the Age of Artificial Intelligence"}]},{"@type":"WebSite","@id":"https:\/\/aboveit.fi\/en\/#website","url":"https:\/\/aboveit.fi\/en\/","name":"We Are Above IT","description":"Tietohallinnon voimavarakumppani","publisher":{"@id":"https:\/\/aboveit.fi\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/aboveit.fi\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/aboveit.fi\/en\/#organization","name":"Above IT Oy","url":"https:\/\/aboveit.fi\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/aboveit.fi\/en\/#\/schema\/logo\/image\/","url":"https:\/\/aboveit.fi\/wp-content\/uploads\/2024\/10\/aboveIT-logo.png","contentUrl":"https:\/\/aboveit.fi\/wp-content\/uploads\/2024\/10\/aboveIT-logo.png","width":1613,"height":383,"caption":"Above IT Oy"},"image":{"@id":"https:\/\/aboveit.fi\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/aboveitfi","https:\/\/www.linkedin.com\/company\/aboveitfi","https:\/\/instagram.com\/aboveitfi"]},{"@type":"Person","@id":"https:\/\/aboveit.fi\/en\/#\/schema\/person\/042286daab0cbba998398a365b01589d","name":"Mika Hakkarainen","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/a524f3c964200b71dc33386439da51c4b3f74947e2015c221f4c90e36fec5096?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/a524f3c964200b71dc33386439da51c4b3f74947e2015c221f4c90e36fec5096?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/a524f3c964200b71dc33386439da51c4b3f74947e2015c221f4c90e36fec5096?s=96&d=mm&r=g","caption":"Mika Hakkarainen"},"sameAs":["https:\/\/aboveit.fi"],"url":"https:\/\/aboveit.fi\/en\/author\/mika-hakkarainenaboveit-fi\/"}]}},"_links":{"self":[{"href":"https:\/\/aboveit.fi\/en\/wp-json\/wp\/v2\/posts\/11981","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aboveit.fi\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aboveit.fi\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aboveit.fi\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/aboveit.fi\/en\/wp-json\/wp\/v2\/comments?post=11981"}],"version-history":[{"count":32,"href":"https:\/\/aboveit.fi\/en\/wp-json\/wp\/v2\/posts\/11981\/revisions"}],"predecessor-version":[{"id":12155,"href":"https:\/\/aboveit.fi\/en\/wp-json\/wp\/v2\/posts\/11981\/revisions\/12155"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/aboveit.fi\/en\/wp-json\/wp\/v2\/media\/11998"}],"wp:attachment":[{"href":"https:\/\/aboveit.fi\/en\/wp-json\/wp\/v2\/media?parent=11981"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aboveit.fi\/en\/wp-json\/wp\/v2\/categories?post=11981"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aboveit.fi\/en\/wp-json\/wp\/v2\/tags?post=11981"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}