Actionable insights from the Microsoft Digital Defense Report:
Protect against 98% of attacks by utilizing antimalware, applying least privilege access, enabling multifactor authentication, keeping [software] versions up to date, and protecting data [with best practices using Data Loss Prevention Policies and Sensitivity Labels].
https://www.microsoft.com/en-us/security/business/microsoft-digital-defense-report