Microsoft 365 (formally Office 365) is one of the most widely-used Software as a Service (SaaS) platforms in the world, currently used by over one million companies globally. However, despite its convenience, it also introduces new security risks that organizations must consider and manage as part of their cybersecurity risk management strategies.