Shut these doors, in this order

Each door is one change, ordered by the exposure it removes and the certification requirements it completes per hour of work. Fixes interact, so the order is recalculated after every one.

Now · 5.5 hours

−0.1 exposure0.5 hoursIDN-006
If anyone - including existing guests - can invite outsiders, you lose control over who has access to your files and Teams.
1. Entra admin centre > External Identities > External collaboration settings.
2. Set 'Guest invite settings' to 'Only users assigned to specific admin roles can invite guest users'.
3. Restrict guest user access to 'limited access' or 'most restrictive'.
CompletesCE-UAC-ACCOUNTSA.5.16

Shut these doors, in this order

Now · 5.5 hours

Next 30 days · 17 hours

Next 90 days · 7 hours