1. Identity
Create the account with least privilege. Add MFA registration in the first hour.
2. Devices
Issue an encrypted, enrolled laptop. Avoid BYOD admin for staff who handle client data.
3. Apps
License only required Microsoft 365 workloads and line-of-business apps.
4. Orientation
Show phishing reporting and how to reach IT.
5. Thirty-day review
Confirm access still matches the role.
Contact Qutzl to build an onboarding template.