Make sure your 365 tenant has been set up securely. Confirm MFA and password policies have been set up correctly. User Sign-in audit logs identifying suspicious activity.

Creates a Risk profile on each employee.