What hundreds of Microsoft 365 deployments have taught me about cybersecurity

After working with that many tenants, the biggest takeaway is simple: most Microsoft 365 security problems aren’t especially sophisticated.

Last year we took over a 45-person medical practice that had been on Microsoft 365 for almost a decade.

Office 365 E3 and Microsoft 365 E3 are a good example: Microsoft 365 E3 includes Intune device management and Entra ID P1 conditional access, while Office 365 E3 does not.

They were licensed for Office 365 E3, not Microsoft 365 E3, so the device had never been enrolled in Intune.

Where I would start Microsoft 365 can be a very secure platform.