Microsoft 365 Security Audit: Proven Tenant Risk Checklist
A working tenant audit checklist for UK businesses on Business Premium, E3 or E5 — how to scope the review, enumerate privileged roles and MFA exemptions, read Conditional Access exclusions properly, harden email and DMARC, find anonymous sharing links and guest sprawl, audit OAuth consent and service principals, confirm logging and alerting would actually detect an incident, and turn the findings into a ranked list somebody will fix.