Exchange Online Hardening · Checklist Sicurezza Microsoft 365

Skillplan M365 Checklist

2026-07-20 19:24

Avanzamento valutazione 0 / 136 elementi 0%

Conformità finora 0 / 0 controlli 0%

Disable SMTP AUTH, IMAP, and POP at the tenant level; allow per-mailbox only with documented justification.

Disable automatic forwarding to external recipients via the Anti-spam outbound policy.

Verify mailbox audit logging is enabled for every mailbox.

Configure DKIM signing for every accepted domain; publish a strict DMARC p=reject after a monitoring period.

Enable the Anti-phishing policy with mailbox intelligence and impersonation protection for executives and high-value users.

Apply the External sender warning tag to all inbound mail from outside the organization.

Disable user-created Exchange Online mailbox auto-forwarding rules to external addresses.

Restrict the Mail Recipient Creation management role to a small named group; review quarterly.