Skillplan M365 Checklist
2026-07-20 19:31
M365
Microsoft 365 Security Checklist
de
en
fr
it
System Online
← Back to sections
Mitigation Controls · Section 1 of 17
Tenant Baselines & Secure Score
Assessment Progress
0
/ 136 items
0%
Fulfillment so far
0
/ 0 controls
0%
Explain this control
Define a Microsoft Secure Score target appropriate for your industry and review the score monthly.
Not Fulfilled
Fulfilled
Accepted
Disable Security Defaults only after equivalent Conditional Access policies are deployed and verified.
Not Fulfilled
Fulfilled
Accepted
Restrict who can register applications (User Settings → App registrations = No, unless required).
Not Fulfilled
Fulfilled
Accepted
Restrict user consent so that permissions requiring consent are granted by admins only.
Not Fulfilled
Fulfilled
Accepted
Enforce self-service password reset only with strong registered authentication methods.
Not Fulfilled
Fulfilled
Accepted
Configure the Tenant Allow/Block List to centrally manage permitted and blocked senders, URLs, and files.
Not Fulfilled
Fulfilled
Accepted
Enable Customer Lockbox to require explicit approval for Microsoft engineer access to tenant data.
Not Fulfilled
Fulfilled
Accepted
Block users from creating Microsoft 365 groups unless explicitly authorized via group membership.
Not Fulfilled
Fulfilled
Accepted
Save and Continue →