Microsoft 365 Security Must Be on Every Investor’s Radar

When investors and their consultants conduct Operational Due Diligence (ODD) on prospective investment funds, the cybersecurity questionnaire is often rigorous. DDQs cover penetration testing, BCP/DR, third-party risk, security awareness training and incident response plans. Yet, despite this thoroughness, one of the most critical environments is frequently overlooked: Microsoft 365 (M365). Read more