Microsoft 365 is the number one target for cyber criminals to attack

Office 365 Email Security Checklist

In addition to enhancing anti-spam, anti-phishing, and anti-malware protection with advanced security solutions, there are several other steps you should take to improve your organisations email security for Office 365. We have compiled a list below of the additional protections that should be enabled on your Office 365 accounts.

• Ensure multi-factor authentication is enabled to prevent compromised credentials from being used to access Office 365 accounts
• Enable mailbox audit logging
• Ensure SPF, DKIM, and DMARC are enabled to identify and block email impersonation attacks
• Disable mailbox auto-forwarding to remote domains
• Disable POP3 or IMAP4 access to mailboxes in Exchange Server
• Block sign-in for shared mailbox accounts
• Disable macros on all devices
• Use a web filtering solution to provide time-of-click protection against malicious hyperlinks in emails
• Enable Office 365 message encryption or use a third-party email encryption solution
• Create an email retention policy and use an email archiving solution to reduce the number of emails stored in mailboxes.
• Create a data loss prevention policy to prevent accidental sharing of sensitive data on email
• Ensure the workforce is provided with regular security awareness training