Every action from the Exchange Online baseline as a scannable list, with the way to check each one and a pointer to the article that argues for it. Tiered critical, recommended and optional, grouped by control-plane domain.
The part of the baseline organised by calendar rather than by control. Exchange Web Services stops working, basic authentication over mail submission follows, and three decisions in this product cannot be walked back once taken. The expensive half of each is the discovery, not the change.
Where judgment starts. Why I use Microsoft's preset threat policies and the quarantine argument nobody makes for them, where user-reported phishing actually lands when nobody configures it, what to stop Outlook doing on an unmanaged device, and the archiving decision that quietly costs you mailbox recovery.
Taking a domain from no email authentication at all to a rejecting DMARC policy, on a worked estate, then going one layer further and authenticating the transport as well as the message. Includes the negative test that most implementations skip and the only one that proves anything.
The controls I will not hand over a tenant without. Mail authentication end to end, including the DKIM record format that changed underneath every build guide, the protocols that predate your Conditional Access policy, and the audit log that is off by default on exactly the licences most estates run.
Every control in the identity baseline defends accounts you own. Mail is the one surface any stranger can address directly, unauthenticated, thousands of times an hour. This is the frame for the Exchange baseline, and the four platform changes that turned familiar recommendations into no-ops.
The whole Entra baseline compressed into a list you can run down in an afternoon. Every action the reasoned articles defended, grouped by the eight control-plane domains and tiered by obligation.
Maester installed, testing your Entra ID baseline against the controls the earlier articles defended, running unattended and alerting you the day the tenant drifts. The piece that turns a baseline into something you can prove.
