Security Controls Reference

User authentication and identity protection controls

Administrative role and privilege management

Access policies and conditional requirements

Application registrations and service principals

Guest users and external collaboration

Account lifecycle and hygiene practices

Audit logs and monitoring capabilities

Data loss prevention and information protection

License utilization and cost optimization