Defender for Office 365 · Microsoft 365 Security Checkliste

Skillplan M365 Checklist

2026-07-20 00:26

Bewertungsfortschritt 0 / 136 Elemente 0%

Bisherige Erfüllung 0 / 0 Kontrollen 0%

Enable the Standard or Strict Preset Security Policy in Defender for Office 365 for all eligible users.

Enable Safe Attachments for SharePoint, OneDrive, and Microsoft Teams.

Enable Safe Links with Time-of-click protection and 'Do not allow users to click through' for high-risk policies.

Configure Zero-hour Auto Purge (ZAP) for both phishing and malware classifications.

Enable Automated Investigation and Response (AIR) playbooks for the top alert types.

Run an Attack Simulator phishing campaign each quarter and track click-through and credential-entry rates.

Configure alert policies for 'User restricted from sending email' and 'Email forwarding rule created'.

Process user-reported phishing via the built-in Report Phishing button for tenant-wide analysis.