Microsoft 365 is a great platform complete with collaboration tools for all types of communication. By default, Microsoft provides core Security capabilities to protect the service itself, as well as controls that are available as needed for any organization. However, most organizations do not implement them or even know where they are. Upon reading Microsoft’s documentation, there are hundreds of different configuration options that control end-user authentication, control external access to restricting downloading of content. Knowing which settings to enable or disable, and their impact on overall security is critical to a better security posture. In this half-day workshop, we will walk through not only understanding but also implementing the top 10 security controls and features that every Microsoft 365 tenant needs enabling.