Start with sign-in and devices, then fix the oversharing.
We review Conditional Access, multifactor authentication and privileged access in Microsoft Entra, and device compliance in Intune, against the Essential Eight maturity level you're aiming for. We close the highest-risk gaps first.
Then we find files shared too widely, protect sensitive ones with Microsoft Purview and agree, for each AI agent, what it can reach and who checks its work.
See identity and security
