This is a helpful resource if you are just getting started (or want to test yourself against best-practices).

A “quick wins” approach to securing Azure Active Directory and Office 365 and improving your security posture - Microsoft Security
This blog post will explain simple Microsoft security defaults and Secure Score—two features you should take advantage of that are easy to utilize and can significantly improve security in Azure AD and Office 365 configurations.