Microsoft Purview Audit (Premium) logging SHALL be enabled.

Why This Matters

Without Microsoft Purview Audit (Premium) logging, your organization lacks detailed visibility into user activities across Microsoft 365 services. This missing audit data can prevent your security team from detecting insider threats, compromised accounts, or unauthorized data access. Enabling Premium logging ensures you capture critical events like mailbox access and administrative changes needed for incident response.

What Aether365 Checks

Aether365 verifies that Microsoft Purview Audit (Premium) logging is enabled for your Microsoft 365 tenant. This check appears in your Aether365 dashboard under the microsoft-365 service category.