Multi factor authentication should be enabled on Microsoft 365 accounts wherever possible. This provides an additional layer of protection if a password is stolen or compromised.
Employees should also use strong, unique passwords and remain alert to phishing emails that could attempt to steal their login details.
