How to Protect Microsoft 365 Emails from Viruses and Phishing

Log in to the Microsoft 365 Defender portal at security.microsoft.com using your administrator credentials.

In the left navigation pane, go to 'Email & collaboration' and select 'Policies & rules', then click on 'Threat policies'.

Select 'Anti-phishing' and either edit the default policy or create a new one to define how impersonation attempts and spoofed emails are handled within your organization.

Under 'Threat policies', configure 'Safe Attachments' to scan incoming files for malware in a virtual environment, and set up 'Safe Links' to verify URLs in real-time when users click them.

Go to the Microsoft Entra admin center, navigate to 'Security' > 'Conditional Access', and create a policy requiring MFA for all users accessing Microsoft 365 applications.

Use Microsoft Defender's Attack simulation training feature to send safe, mock phishing emails to employees and assign training to those who interact with the simulated malicious elements.

Regularly instruct users to verify sender URLs, avoid unexpected links and attachments, use strong passwords, and review quarantined messages carefully before releasing them.