The Cybersecurity and Infrastructure Security Agency (CISA) offers two free assessment tools to help organizations identify security misconfigurations in Microsoft 365 and Google Workspace.