- Check for mailbox auditing and unified audit log search.
- Email authentication: SPF, DKIM, and DMARC
- Check for legacy protocols and basic authentication
- check for multi-factor authentication.
- check for mailbox auto-forwarding to remote domains
- check for allowed sign-in for all shared mailboxes
- check for anti-spam, anti-malware, and outbound spam policies
- check for mobile device policies
- Default Alert policies