Data-driven decision-making: The power of enhanced event logging

Microsoft outlines a joint effort with CISA, OMB, ONCD, and the EOP to expand Microsoft 365 audit logging for U.S. government agencies—extending default retention to 180 days and adding 30 audit logs to Audit (Standard)—to improve visibility for threat detection and investigation. The initiative aligns with M-21-31 logging maturity goals and secure-by-design/default principles, and includes a forthcoming CISA co-developed playbook to help agencies operationalize these capabilities.