Yes! Lots of stuff to do across all aspects but at a minimum multifactor with Azure AD, conditional access with name locations and only the countries your staf

Yes! Lots of stuff to do across all aspects but at a minimum multifactor with Azure AD, conditional access with name locations and only the countries your staff will be logging in from. Lots more here but there is also the Microsoft guide and recommendations inside your tenant (after login) via https://security.microsoft.com/ https://security.microsoft.com/ and look at Secure Score and Recommended actions