Tenant Baselines & Secure Score · Microsoft 365 Security Checkliste

Skillplan M365 Checklist

2026-07-20 19:30

Bewertungsfortschritt 0 / 136 Elemente 0%

Bisherige Erfüllung 0 / 0 Kontrollen 0%

Define a Microsoft Secure Score target appropriate for your industry and review the score monthly.

Disable Security Defaults only after equivalent Conditional Access policies are deployed and verified.

Restrict who can register applications (User Settings → App registrations = No, unless required).

Restrict user consent so that permissions requiring consent are granted by admins only.

Enforce self-service password reset only with strong registered authentication methods.

Configure the Tenant Allow/Block List to centrally manage permitted and blocked senders, URLs, and files.

Enable Customer Lockbox to require explicit approval for Microsoft engineer access to tenant data.

Block users from creating Microsoft 365 groups unless explicitly authorized via group membership.