Microsoft 365 includes many security features that are not configured automatically. A short review often closes significant gaps.
Settings to Check
- Multifactor authentication for all users, including administrators and shared mailboxes where sign in is allowed.
- Block legacy authentication, which bypasses modern protections.
- Limit administrator accounts and use separate admin identities rather than everyday accounts.
- External sharing policies for SharePoint and OneDrive, so files are not shared publicly by mistake.
- Mailbox auditing and alerts for suspicious forwarding rules, a common sign of a compromised account.
- Phishing protection and safe links policies in Microsoft Defender, where your licence includes them.
- Device management with Intune to enforce encryption and updates on laptops and phones.
Check Your Licence
Some features depend on your Microsoft 365 plan. A licence review may show that a different plan offers better protection for a similar cost.
Document What You Change
Record each setting and why it was chosen, so future changes do not undo your protection.
Get in touch for a Microsoft 365 security review.