Defender for Cloud Apps · Microsoft 365 Security Checkliste

Skillplan M365 Checklist

2026-07-20 19:35

Bewertungsfortschritt 0 / 136 Elemente 0%

Bisherige Erfüllung 0 / 0 Kontrollen 0%

Enable Cloud Discovery (Shadow IT) reports using Defender for Endpoint or a network log feed.

Configure App Governance policies to alert on overprivileged OAuth applications.

Require admin consent for any OAuth app requesting access to mail, files, or directory data.

Configure session policies on approved SaaS apps (Salesforce, Box, ServiceNow) to block download to unmanaged devices.

Connect at least one SaaS app via the App Connector for richer alerts than network-log discovery alone.

Set anomaly detection policies (impossible travel, mass download, ransomware activity) to alert and auto-respond.

Review the OAuth app inventory monthly; revoke consent for apps with no business use.

Integrate Defender for Cloud Apps with Conditional Access App Control to enforce session-based restrictions.