What you're also going to need is an Office 365 backup solution from https://spinbackup.com/products/office-365-backup/, which helped me a lot with the security of my data.
Here's what I was able to do:
1. Store a separate copy of my critical data at AWS or GCP.
2. Protect my Admin account against hijacking.
3. Protect my Users against ransomware and data breach.
What you're also going to need is an Office 365 backup solution from https://spinbackup.com/products/office-365-backup/, which helped me a lot with the security of my data.
Here's what I was able to do:
1. Store a separate copy of my critical data at AWS or GCP.
2. Protect my Admin account against hijacking.
3. Protect my Users against ransomware and data breach.