Have you considered…?
- External sharing defaults. Are site and tenant settings aligned to your risk tolerance (off, org-only, specific people)?
- Ownership & sprawl. Who owns each site? Do you have a simple pattern that prevents “files everywhere”?
- Versioning & restore. Are versioning and recycle settings deliberate so recovery is boring and reliable?
- OneDrive policies. Known Folder Move, sync controls, storage, and retention defaults — intentional or inherited?
- Search & navigation. Can people actually find what they need across sites and hubs?
- Labels & retention. Are you ready for basic sensitivity/retention without slowing work?