Follow the guidance in this CIS document to configure Microsoft 365 security settings to the level that suits your organization.

Source: Center for Internet Security releases Microsoft 365 benchmarks