Microsoft Entra Tenant Security Baseline: What to Lock Down First
New vulnerabilities and incident headlines change how urgent security feels. They rarely change the fundamentals. Most tenants share the same handful of gaps: weak sign-in methods, too many admins, unmanaged devices, loose app consent, and logs that expire before anyone looks at them. This is the baseline I would check first in a Microsoft Entra tenant. It is split into two horizons, this week and within 30 days, and everything uses features you already pay for. For each control you get what to do, why it matters and how to verify it. ...