Best Practice - Recommended Configurations

Identity and device access configurations - Link

Prerequisite work - Link

Common identity and device access policies - Link

Recommended Exchange Online access policies - Link

Recommended SharePoint Online access policies - Link