Managed ISPM

ISPM will actively monitor, deploy and remediate settings for SharePoint Online. This includes features such as Internal and External sharing controls, guest access permissions and OneDrive syncing.

I ran into an interesting situation with one of my clients. for the 2 to 4 Global admins control, it's not detecting if a user has the Global Admin role assigned via a security group. This also might be worth building a detection for, because someone could assign themselves a Global admin role using a security group and not be detected.