Implemented Microsoft 365 baseline security recommendations, enabled self-service password reset and reviewed the tenant for legacy accounts and excessive privileges. A dedicated break-glass administrator account was also created to provide secure recovery access if normal administrator accounts become unavailable.