M365/Exchange/Teams Baseline – M365 (Light) Baseline – M365 (Light) MFA/CA Policies, sichere Adminrollen, Audit‑Logs E‑Mail: Anti‑Phishing/Spam, DLP/Retention (falls lizenziert) E‑Mail Security (SPF/DKIM/DMARC) E‑Mail Security (SPF/DKIM/DMARC) SPF‑Record restriktiv, DKIM aktiv, DMARC „quarantine/reject“ nach Monitoring‑Phase