Baseline – M365 (Light) MFA/CA Policies, sichere Adminrollen, Audit‑Logs E‑Mail: Anti‑Phishing/Spam, DLP/Retention (falls lizenziert)
