We're deploying this solution within my company - following the implementation phase, what would be the Microsoft estimate of the support overhead needed to maintain Defender for O365 in hours per month? Our MSP is implying 6-8 hours a month of on-going tuning.
Great question! While the amount of time spent with on going tuning can vary depending on your specific situation, we have introduced some great features recently to dramatically reduce the time and effort for ongoing tuning. Preset Security Policies allow you to simply choose a strict or standard profile for you users and we will manage all security controls configuration going forward, even when new controls are introduced. We have also introduced some great tools for managing mail detections. The report message add-in let’s your users report messages that they think should have been blocked to you and to Microsoft directly. As an admin, you can submit emails, URLs, or files directly to our analysts for review without a support call. Taking advantage of these tools can greatly reduce time spent managing your tenant.