Top 12 tasks for security teams to support working from home

If you suddenly find yourself supporting a primarily home-based workforce for your customers, we want to help you ensure your customer organization is working as securely as possible. This article prioritizes tasks to help security teams implement the most important security capabilities as quickly as possible.

If you are a small or medium-size organization using one of Microsoft’s business plans, see these resources instead:

• Top 10 ways to secure Office 365 and Microsoft 365 for business plans
• Microsoft 365 for Campaigns (includes a recommended security configuration for Microsoft 365 Business)

For customers using our enterprise plans, Microsoft recommends you complete the tasks listed in the following table that apply to your service plan. If, instead of purchasing a Microsoft 365 enterprise plan, you are combining subscriptions, note the following:

• Microsoft 365 E3 includes Enterprise Mobility + Security (EMS) E3 and Azure AD P1
• Microsoft 365 E5 includes EMS E5 and Azure AD P2
  

  	Task	All Office 365 Enterprise plans	Microsoft 365 E3	Microsoft 365 E5
  1	Enable Azure Multi-Factor Authentication (MFA)	Yes	Yes	Yes
  2	Protect against threats	Yes	Yes	Yes
  3	Configure Office 365 Advanced Threat Protection			Yes
  4	Configure Azure Advanced Threat Protection (ATP)			Yes
  5	Turn on Microsoft Advanced Threat Protection			Yes
  6	Configure Intune mobile app protection for phones and tablets		Yes	Yes
  7	Configure MFA and conditional access for guests, including Intune app protection		Yes	Yes
  8	Enroll PCs into device management and require compliant PCs		Yes	Yes
  9	Optimize your network for cloud connectivity	Yes	Yes	Yes
  10	Train users	Yes	Yes	Yes
  11	Get started with Microsoft Cloud App Security			Yes
  12	Monitor for threats and take action	Yes	Yes	Yes