Microsoft 365 Security Guides
The Microsoft 365 security cluster for Canadian small businesses — start with the checklist, then go deeper into phishing defence, Conditional Access, MFA, and backup as you tighten the tenant.
Start outside the tenant: check your domain’s SPF, DKIM and DMARC — the records that decide whether anyone can send mail as you.
Microsoft 365 Security Checklist for Small Businesses (2026)
A 19-control Microsoft 365 hardening checklist for Canadian small businesses: MFA, Conditional Access, legacy auth, phishing defense, endpoints, backup, and incident response.
Live · Read guide →
Phishing & Email Threat Defense for Microsoft 365
How to configure Microsoft Defender anti-phishing, Safe Links, impersonation protection, and reporting habits for small teams on Microsoft 365.
Live · Read guide →
Conditional Access Policies for Small Business
How to design, test, and enforce Conditional Access in a Microsoft 365 Business Premium tenant without locking the team out.
Live · Read guide →
Rolling Out MFA Without Breaking Things
A practical rollout plan for Microsoft 365 MFA across staff, shared mailboxes, service accounts, BYOD devices, and admin accounts.
Live · Read guide →
Microsoft 365 Backup for Small Business
Why OneDrive sync and the Recycle Bin are not full backups, and what small businesses should deploy for reliable Microsoft 365 recovery.
Live · Read guide →
Need help deciding which control to fix first?
Start with the checklist, then request a free security assessment if you want help turning the guidance into a rollout plan.