This would go a long way in shoring up the identity security, but also other configurations. This would be a configuration review of MFA, Identity settings, Defender settings, conditional access, etc. Could be as simple as pulling in the security scorecards with a little adjustment, but I think it could be even better than that.