Protect accounts and access.
Multi-factor authentication adds another check to a sign-in, so a stolen password alone isn’t enough to get into the account. We set up MFA and review permissions periodically, so each person’s access matches the work they do.
Administrator accounts need particular care because they can change the wider setup, which is why an everyday account shouldn’t also be an admin account. We look at who has administrator access, how it’s protected, and which permissions employees need for their jobs. On a managed plan, identity detection and response (ITDR) watches for signs that an account has been taken over, such as a sign-in that doesn’t fit how that person normally works.
Account security · Access reviews · Microsoft 365 settings
