User access, Microsoft 365 security, endpoints, backups, passwords and exposed credentials, device security and cyber hygiene, plus the AI half: which tools your team uses, what data has gone into them, permissions on connected apps, and whether you have an acceptable-use policy.
