What we found in your tenant.
Five things stood out. None are emergencies. Three would fail a Cyber Essentials assessment as configured today.
Conditional access
MFA is enforced for nine of eleven admin accounts. The two exceptions are service accounts left over from the 2024 migration. Recommend retiring both and rotating their secrets in Entra → Apps.