Microsoft 365 security has evolved to become broader and deeper as the number of Microsoft 365 capabilities has grown considerably in the Security & Compliance Center and peripheral offerings such as Microsoft Cloud App Security. An important element of this evolution has been how these individual security capabilities have become base security services integrated with the major applications in the Microsoft 365 ecosystem.

M365 will need to continue evolving security at all levels to be effective – the M365 cloud services, user behaviour, and the devices they use. SolarWinds has taught us that we are all only as secure as our weakest link in the supply chain at all levels. Microsoft 365 will have to diligently manage their own supply chain of external dependencies used to build and deliver the M365 cloud services.