"Safe Company with SECURITY MASTERS" Program - PLN 100,000 for the cybersecurity of SMEs using Microsoft 365

Security Masters is launching the second edition of the "Safe Company" program for Polish micro, small and medium-sized enterprises using Microsoft 365.
We are allocating a total of PLN 100,000 from our own funds to deliver the program .

The program starts on September 30, 2026 and will run until December 30, 2026.
Its purpose is to support smaller businesses that use Microsoft 365 but do not always have an IT employee, a person responsible for cybersecurity, or services for analysing and monitoring dangerous events or intrusions into the company.

Companies that qualify for the program will receive access to expert consultations, support in the area of Microsoft 365 security, and cybersecurity training for employees.

These activities are carried out directly by Damian Wróblewski - the owner of Security Masters, an Ethical Hacker and Microsoft 365 MVP, known for numerous publications and public appearances at industry events as well as in the press, radio and television.
More information about the author of this program is available on his website: www.damianwroblewski.pl/uk

What is the "Safe Company with SECURITY MASTERS" Program?

It is a program for micro, small and medium-sized companies using Microsoft 365.
As part of the second edition, Security Masters is allocating PLN 100,000 from its own funds to support Polish entrepreneurs in the area of cybersecurity . Qualified companies will be able to benefit from, among other things:

• Stage 1: Confirmation of eligibility to participate in the program
• Stage 2: A free consultation conducted by Damian Wróblewski, Microsoft MVP in the Microsoft 365 area, owner of Security Masters and ethical hacker
• The meeting is attended by the company owner and/or members of the management board, as well as the person responsible for IT with administrative permissions
• The meeting is held online and takes the form of a security review of the Microsoft 365 environment
• During the meeting, Damian provides specific advice on the current state of the IT environment and explains what should be improved or changed as part of the "essential minimum"
• Stage 3: Within the capabilities of the licences already owned, Security Masters will help solve the identified problem and provide 2 hours of Microsoft 365 engineer work free of charge. The engineer will remediate at least one identified vulnerability, risk or gap in the configuration of basic Microsoft 365 security controls as part of the program.
• Stage 4: An invitation to a group cybersecurity training session for all company employees (1 hour online).

The program runs from September 30, 2026 to December 30, 2026.

Who is the "Safe Company" Program for?

The program is aimed directly at micro, small and medium-sized enterprises that use Microsoft 365.

If your company uses Outlook, Teams, OneDrive, SharePoint, Exchange Online or other Microsoft 365 services, the security of user accounts becomes one of the fundamental elements of the security of the entire organisation.
It makes little difference whether the company employs 1, 10, 50 or 300 people.

One successfully compromised account is enough.

Especially if it belongs to the company owner, a member of the management board, a person responsible for accounting, legal or HR matters, or someone with administrative permissions to IT environments.

A cybercriminal may then gain access to email, customer correspondence, documents and data stored in the cloud, or use the compromised account to continue the attack. This is why the "Safe Company" program focuses specifically on businesses using Microsoft 365.

Why does Microsoft 365 require proper security configuration?

Many companies using Microsoft 365 mistakenly assume that buying licences means they automatically have a fully secured platform in place. Nothing could be further from the truth...

Microsoft 365 is like a house in a shell condition. You still need to install the doors and windows and properly equip and secure it. After analysing more than 600 Polish companies, we concluded that it was worth creating a program to make company owners and management boards aware that a lack of basic security controls can lead to a breach. In the era of rapidly developing AI, such attacks and successful compromises are only a matter of time for organisations that have purchased licences but have not configured anything else themselves or with the help of third parties - at minimum in the areas of Microsoft 365 identity and the protection of devices such as computers and company phones.

For many small and medium-sized companies, Microsoft 365 has become the primary working environment.

This is where email is hosted. Employees hold meetings in Teams, and files are stored in OneDrive and SharePoint. The environment also contains user accounts and the mechanisms responsible for sign-in and access to data.

The problem arises when a company has purchased Microsoft 365 licences but nobody has checked whether the environment has been properly secured, assuming that purchasing licences and enabling accounts is enough because "everything works".

PLN 100,000 to support the cybersecurity of Polish companies

We are allocating a total of PLN 100,000 from Security Masters' own funds to deliver the second edition of the "Safe Company" program.

This is our investment in improving the security of Polish micro, small and medium-sized enterprises.
We want companies that do not have their own cybersecurity team on a daily basis to be able to access the knowledge and experience of experts working with Microsoft 365 security.

• Not every small company needs its own SOC (Security Operations Center - a team that responds to cyber threats and analyses and monitors logs 24/7).
• Not every company needs a large security department.

But every company using Microsoft 365 should at least know:

• whether its environment is properly secured,
• whether MFA (multi-factor authentication) really works correctly, or whether "Security Defaults" is enabled and it only "seems" that MFA is working effectively - our answer is: "It is not working effectively" - and we will demonstrate this during the meeting.
• whether administrator accounts are protected,
• whether employees know how to respond to phishing,
• whether the organisation knows what to do after an account compromise,
• who will respond if an incident occurs in the evening or while the person responsible for IT is unavailable.

Why are we launching the second edition of the program?

We have been working with Microsoft 365 environments for years and we repeatedly see the same problem. Many companies have Microsoft 365, but they do not always use the available security mechanisms, especially the basic ones.
The environment was set up some time ago. Email works. Teams works as well. Employees can sign in and do not report any problems.

And for several years, nobody comes back to the question:

Is this environment properly secured? - No...

Until an incident occurs.

The "Safe Company" program is intended to encourage entrepreneurs to ask this question earlier.

• Not after an email account has been compromised.
• Not after a fraudulent bank account number has been sent to a client.
• Not after data has been encrypted.

Before anything happens - prevention is better than cure.

How can a company apply for the "Safe Company" Program?

If your company is a micro, small or medium-sized enterprise and uses Microsoft 365, you can apply to participate in the program. Participation requires prior registration and qualification of the company.
The number of companies that can receive direct support is limited due to the availability of our specialists and the budget allocated to the second edition of the program.

You can contact us by email at: [email protected] or by phone at +48 536 535 534

Do you use Microsoft 365? Check the security of your company

If you run a micro, small or medium-sized company using Microsoft 365, apply for the second edition of Security Masters' "Safe Company" program. The program runs until December 30, 2026 or until all available places have been filled. The number of places is limited.

AI usage note: The graphic used in this article was created using artificial intelligence tools. Tools based on LLM models were used solely as support for language editing, organisation and improving the readability of the text. Damian Wróblewski is the author of the concept of the "Safe Company" program, its assumptions and all of its substantive content. The final version of the article was reviewed and approved by him before publication.