Microsoft Secure Score Series – 15 – Do not expire passwords
Research has found that when periodic password resets are enforced, passwords become less secure. Users tend to pick a weaker password and vary it slightly for…
Category
Secure Score
Microsoft Secure Score Series – 14 – Designate more than one global admin
Having more than one global administrator helps if you are unable to fulfill the needs or obligations of your organization. It's important to have a delegate…
Microsoft Secure Score Series – 13 – Set automated notifications for new and trending cloud applications in your organization
With Cloud Discovery policies, you can set alerts that notify you when new apps are detected within your organization. And again, we're back at Cloud App…
Microsoft Secure Score Series – 12 – Turn on customer lockbox feature
Turning on the customer lockbox feature requires that approval is obtained for data center operations that grants a Microsoft employee direct access to your…
Microsoft Secure Score Series – 11 – Turn on user risk policy
With the user risk policy turned on, Azure AD detects the probability that a user account has been compromised. As an administrator, you can configure a user…
Microsoft Secure Score Series – 10 – Discover trends in shadow IT application usage
Add a data source in automatic log upload for Cloud App Security Discovery to identify applications in your organization that run without official approval.…
Microsoft Secure Score Series – 09 – Do not allow users to grant consent to unmanaged applications
Tighten the security of your services by regulating the access of third-party integrated apps. Only allow access to necessary apps that support robust security…
Microsoft Secure Score Series – 08 – Use Cloud App Security to detect anomalous behavior
Cloud App Security anomaly detection policies provide User & Entity Behavior analytics (UEBA) and advanced threat detection across your cloud environment.
Microsoft Secure Score Series – 07 – Turn on sign-in risk policy
Turning on the sign-in risk policy ensures that suspicious sign-ins are challenged for multi-factor authentication.
Microsoft Secure Score Series – 06 – Enable policy to block legacy authentication
Today, most compromising sign-in attempts come from legacy authentication. Older office clients such as Office 2010 don’t support modern authentication and use…
Microsoft Secure Score Series – 05 – Enable self-service password reset
With self-service password reset in Azure AD, users no longer need to engage helpdesk to reset passwords. This feature works well with Azure AD dynamically…
Microsoft Secure Score Series – 04 – Ensure all users can complete multi-factor authentication for secure access
Multi-factor authentication (MFA) helps protect devices and data that are accessible to these users. Adding more authentication methods, such as the Microsoft…