Practical Microsoft 365 security checklist mapped to SOC 2. Covers identity, device management, DLP, email protections, logging, backups, vendor controls, and evidence collection to streamline audits.