Microsoft 365 Security Checklist

What's Included

This checklist covers essential security settings for Microsoft 365 Business Premium and Enterprise tenants. Items marked as critical should be implemented first.

• Identity and Access (MFA, Conditional Access, PIM)
• Email Security (Anti-phishing, Safe Attachments, Safe Links)
• Data Protection (Audit logging, DLP, Sensitivity labels)
• Devices and Endpoints (Defender, Compliance, ASR)
• Teams and Collaboration security
• Admin portal paths for each setting
• Notes sections for tracking progress

Includes specific admin portal paths to help you locate each setting quickly. Some features require specific M365 licensing.