Who can see your files, inside and outside the company.

• Anyone links off, or expiring and view only
• External sharing limited to the sites that need it
• Sensitivity labels for the two or three kinds of documents that matter
• Data loss prevention for the obvious things: card numbers, IDs, client files
• Retention set on purpose, not by accident
• A backup you have actually restored from, because Microsoft's retention is not a backup

The Full Assessment covers every sharing setting and the retention state with evidence. Hardening fixes them in an order that does not break how people work.