You have MFA enabled, but how many employees have it set up? Have you sufficiently secured all domains in your Azure AD tenant? These and other pitfalls you can avoid before you get hacked. A Lessons Learned session on a broad spectrum of issues from Security Assessments performed based on Office 365 and Azure AD. Here I show a practical example, but also indicate how you can check and adjust this yourself