CISA Security Recommendations for Office 365 - CISA Alert aa20-120a

In this tech talk we walk through the Office 365 Security mitigations recommended by the Cybersecurity and Infrastructure Security Administration in response to the large number of businesses moving rapidly to Office 365 in response to COVID 19.

Enable multi-factor authentication for administrator accounts​
Assign administrator roles using Role-based Access Control (RBAC)​
Enable Unified Audit Log (UAL)​
Enable multi-factor authentication for all users​
Disable legacy protocol authentication when appropriate​
Enable alerts for suspicious activity​
Incorporate Microsoft Secure Score​
Integrate logs with your existing SIEM tool​

We walk through where and how to perform the suggested activities to start to secure your cloud environment.