Most small businesses run on Microsoft 365 — and most are missing a handful of settings that would dramatically improve their security. Here are five you can turn on quickly.
The top five
- Multi-factor authentication for every user, not just admins
- Block legacy authentication, which bypasses MFA
- Anti-phishing policies to catch impersonation attempts
- Audit logging so you can see what happened if something goes wrong
- Safe Links / Safe Attachments to scan malicious content
Why they matter
These settings target the exact techniques attackers use against small businesses — credential theft, phishing and account takeover. Most can be enabled in well under 30 minutes.
Want a hand?
If you'd rather someone check your tenant and switch these on correctly, that's exactly what my Enhance service covers. Contact me or start with the Risk Check.