Hardening items

8 recommendations. Filter by category, criticality, maturity tier, or system.

Critical (3)High (5)Medium (0)Low (0)

Enable time-of-click URL scanning and sandbox-based attachment detonation to stop phishing links and malicious files before they reach users.

Updated Jul 9, 2026Microsoft 365 · Microsoft Exchange Online

Require multi-factor authentication for all users and block legacy protocols (IMAP, POP, SMTP AUTH) that bypass MFA entirely.

Updated Jul 9, 2026Microsoft 365 · Microsoft Entra ID · Microsoft Exchange Online