Remote Support

Security best practices for Office 365 and Hosted Exchange Mailboxes

Share This Post

365 quarantine

Microsoft recommends that you complete the security tasks listed in the following table to fully secure your Microsoft Office, Azure and Hosted Exchange Data.

Items 1,4,5,6 needs to be carried out by your Office 365 Mail Administrator.

Item 2 needs to be carried out in-house and as a user training exercise.

Item 7,8,9 require the purchase of Microsoft Advance Threat Protection (ATP) for each user unless you are using Office 365 Enterprise E5 which has ATP already built in. Your Office 365 Mail Administrator can arrange the purchase and installation.

Task
1 Set up multi-factor authentication using Microsoft Authenticator App

or Set up multi-factor authentication to use text messaging
2 Train your users – protecting accounts and devices from hackers and malware

Train your users with The Harvard Kennedy School Cybersecurity Campaign Handbook
3 Use dedicated admin accounts
4 Raise the level of protection against malware in mail
5 Protect against ransomware
6 Stop auto-forwarding for email
7 Protect your email from phishing attacks using ATP
8 Protect against malicious attachments and files with ATP Safe Attachments
9 Protect against phishing attacks with ATP Safe Links

See also https://docs.microsoft.com/en-us/office365/securitycompliance/security-best-practices

For a FREE assessment, our rates, charges and terms, please contact us.

HYBRID ICT are a Microsoft Silver Small and Mid-market Cloud Solutions Partner and Apple Consultant Network Partner