Microsoft Secure Score Requirements for MSPs: What You Need to Know by October 2025
Microsoft is raising the security bar for Managed Service Providers (MSPs) like Kinetics Group,and the deadline is approaching faster than many realise. Starting October 1, 2025, MSPs must maintain a minimum 80% Microsoft Secure Score in their Partner Centre or risk losing their authorisation to sell Microsoft services.
This isn’t just another compliance checkbox—it’s a fundamental shift that will separate strategic IT partners from basic service providers. For New Zealand businesses working with IT partners/MSPs, this change represents an opportunity to ensure your technology partner is truly equipped to protect your digital assets.
The New Security Baseline: What MSPs Must Achieve
The requirements are clear and non-negotiable. By October 1, 2025, all MSPs must: maintain an 80% or higher Microsoft Secure Score in their “Microsoft Partner Centre”. This score reflects the overall security posture of the MSP’s own systems and processes.
Failure to meet these requirements will result in immediate loss of MSP authorization to sell Microsoft services—effectively ending their ability to provide Microsoft-based solutions to customers.
Relax! We’re not going to have a problem!
Kinetics is well over the threshold.
Our exact score is confidential and fluctuates as we maintain our own assets.
88+%
Why This Matters for Your Business
The answer lies in understanding that your MSP’s security posture directly impacts your organisation’s risk profile.
Customer Trust and Protection An MSP with a strong Secure Score demonstrates genuine commitment to cybersecurity best practices. This translates to better protection for your business data, more proactive threat detection, and stronger incident response capabilities.
Insurance and Compliance Benefits Increasingly, cyber insurance providers are using Microsoft Secure Score as a factor in determining coverage rates and terms. Some insurers now offer better rates for businesses whose MSPs maintain high security scores, recognizing that stronger partner security reduces overall risk.
Strategic IT Partnership Indicator The Secure Score requirements reveal whether your MSP approaches security strategically or reactively. MSPs who have already achieved and maintained high scores demonstrate the systematic thinking and proactive management that characterizes strategic IT partners.
Red Flags: MSPs Who Aren’t Ready
As the October deadline approaches, some warning signs indicate an MSP may struggle to meet the requirements:
- Limited Reporting: MSPs who can’t provide regular, meaningful security metrics are unlikely to have the measurement frameworks required for consistent Secure Score management.
- Fragmented Services: Providers who treat security as a separate add-on rather than an integrated component of their service delivery model may struggle with comprehensive score management.
The Kinetics Advantage: Already Secure Score Ready
At Kinetics, we’ve been preparing for these requirements long before Microsoft announced them. Our systematic approach to cybersecurity through our KARE service has consistently maintained high Secure Scores across our client base.
- Proactive Security Management Our KARE Foundation multi-layered cybersecurity approach includes endpoint detection and response (EDR), multi-factor authentication management, and continuous monitoring—all components that contribute to strong Secure Score performance.
- Systematic Processes Our documented security processes ensure consistent response times, proper incident management, and the systematic approach required for sustained high scores.
- Strategic Integration Security isn’t an afterthought in our service delivery—it’s integrated into every aspect of our FlightPlan methodology and Business Advisory service.
Questions to Ask Your Current MSP
If you’re working with another IT partner, these questions will help you understand their readiness for the October 2025 requirements:
- What is your current Microsoft Secure Score, and how do you track it?
- How do you ensure 24-hour response times to security alerts?
- Who is your designated security contact, and what are their qualifications?
- How will you maintain the 80% score requirement while managing growth?
- What happens to our service if you don’t meet the requirements?
The Strategic Opportunity
The Microsoft Secure Score requirements represent more than compliance—they’re an opportunity to evaluate whether your IT Partner truly provides strategic IT partnership or merely technical support.
If your current MSP is scrambling to meet these requirements or can’t clearly articulate their compliance strategy, it may be time to consider whether they’re truly equipped to support your business growth in an increasingly complex security landscape.
Since 1996, Kinetics has been pioneering proactive security management for New Zealand businesses. Our systematic approach to cybersecurity has consistently maintained the high standards now being mandated by Microsoft’s Secure Score requirements.
Ready to evaluate your MSP’s security readiness? Contact us for a complimentary IT Partnership Health Check: 0800 546 384 or visit kinetics.co.nz
Making your IT work for you means ensuring your technology partner is equipped to protect your business in an evolving threat landscape.