Reference links:
https://docs.microsoft.com/en-us/deployoffice/teams-install
https://docs.microsoft.com/en-us/deployoffice/deploy-office-365-proplus-from-the-cloud
https://docs.microsoft.com/en-us/deployoffice/deploy-office-365-proplus-from-a-local-source

The Service Trust Portal contains details about Microsoft’s implementation of controls and processes that protect our cloud services and the customer data therein. To access some of the resources on the Service Trust Portal, you must log in as an authenticated user with your Microsoft cloud services account (either an Azure Active Directory organization account or a Microsoft Account) and review and accept the Microsoft Non-Disclosure Agreement for Compliance Materials.
Service Trust Portal – Get in-depth information to help you meet GDPR obligations
The Privacy area on Service Trust Portal provides GDPR resources across Microsoft Cloud services, including Office 365, Azure, Dynamics 365, Windows, and Professional Services. You can find 3 primary topics under the Privacy tab:
Data Subject Requests (DSRs): get information about how specific Microsoft Cloud services enable you to discover, access, rectify, restrict, delete, and export personal data; connect you to the DSRs tools Microsoft builds to help you respond to DSRs (e.g. Data Log Export for responding to telemetry log DSRs).
Data breach notification: find information about how Microsoft detects and responds to personal data breaches, and how you can set up your privacy contact to receive breach notifications from Microsoft in the event of personal data breach.
Data Protection Impact Assessments (DPIAs): learn about Microsoft’s and your responsibilities for DPIA compliance, and get information provided by Microsoft that can support you to create your own DPIAs.

Azure Multi-Factor Authentication (MFA) helps safeguard access to data and applications while maintaining simplicity for users. It provides additional security by requiring a second form of authentication and delivers strong authentication via a range of easy to use authentication methods.

Reference:
http://techgenix.com/multifactor-authentication-office-365/

Reference:
https://docs.microsoft.com/en-us/microsoft-365/security/defender/microsoft-secure-score?view=o365-worldwide

Post-incident reviews
Microsoft’s commitment to continuous improvement involves analysis of unplanned customer-impacting service incidents to minimize future recurrence.
Unplanned service incidents are defined as multi-tenant service disruptions that impact service usage as defined by our service SLAs, and have been declared as such on the Service Health Dashboard.
For unplanned customer-impacting service incidents in which there was broad and noticeable impact across a large number of organizations, a preliminary Post-Incident Review (PIR) will be delivered via your Service Health Dashboard within 48 hours of incident resolution, followed by a final PIR within five business days. The detailed PIR report includes:
User experience and customer impact
Incident start and end date/time
Detailed timeline of impact and resolution measures
Root cause analysis and actions being taken for continuous improvement

Software as a service (SaaS) is a software distribution model in which a third-party provider hosts applications and makes them available to customers over the Internet. SaaS is one of three main categories of cloud computing, alongside infrastructure as a service (IaaS) and platform as a service (PaaS).
Advantages
SaaS removes the need for organizations to install and run applications on their own computers or in their own data centers. This eliminates the expense of hardware acquisition, provisioning and maintenance, as well as software licensing, installation and support.
Flexible payments: Rather than purchasing software to install, or additional hardware to support it, customers subscribe to a SaaS offering. Generally, they pay for this service on a monthly basis using a pay-as-you-go model. Transitioning costs to a recurring operating expense allows many businesses to exercise better and more predictable budgeting. Users can also terminate SaaS offerings at any time to stop those recurring costs.
Scalable usage: Cloud services like SaaS offer high vertical scalability, which gives customers the option to access more, or fewer, services or features on-demand.
Automatic updates: Rather than purchasing new software, customers can rely on a SaaS provider to automatically perform updates and patch management. This further reduces the burden on in-house IT staff.
Accessibility and persistence: Since SaaS applications are delivered over the Internet, users can access them from any Internet-enabled device and location.

Reference:
https://docs.microsoft.com/en-us/partner-center/enrolling-in-the-csp-program

Legacy apps can’t be moved on the cloud as it is not supported . Best example is SFB

Reference: https://docs.microsoft.com/it-IT/azure/active-directory/authentication/concept-mfa-howitworks

Microsoft Intune is a cloud-based service that focuses on mobile device management (MDM) and mobile application management (MAM). Intune is included in Microsoft’s Enterprise Mobility + Security (EMS) suite, and enables users to be productive while keeping your organization data protected. It integrates with other services, including Microsoft 365 and Azure Active Directory (Azure AD) to control who has access, and what they have access to, and Azure Information Protection for data protection. When you use it with Microsoft 365, you can enable your workforce to be productive on all their devices, while keeping your organization’s information protected.
With Intune, you can:
Choose to be 100% cloud with Intune, or be co-managed with Configuration Manager and Intune.
Set rules and configure settings on personal and organization-owned devices to access data and networks.
Deploy and authenticate apps on devices — on-premises and mobile.
Protect your company information by controlling the way users access and share information.
Be sure devices and apps are compliant with your security requirements.

What is Microsoft Stream?
Microsoft Stream is an Enterprise Video service where people in your organization can upload, view, and share videos securely. You can share recordings of classes, meetings, presentations, training sessions, or other videos that aid your team’s collaboration.
Microsoft Stream is a secure video service so you can manage who views your video content and determine how widely to share within your organization. Secure application access is enabled by Azure Active Directory, a recognized leader in identity management systems, to protect sensitive corporate content.
Microsoft Stream also helps you organize content into channels and groups so it’s easier to find. Microsoft Stream works well with other Office 365 apps like Teams, SharePoint, OneNote, and Yammer, giving even more ways to discover more relevant content.

Microsoft Teams is a unified communication and collaboration platform that combines persistent workplace chat, video meetings, file storage (including collaboration on files), and application integration. The service integrates with the company’s Office 365 subscription office productivity suite and features extensions that can integrate with non-Microsoft products. Microsoft Teams is a competitor to services such as Slack and is the evolution and upgrade path from Microsoft Skype for Business.

Pay for your Office 365 for business subscription
When you set up your subscription, you can choose to pay by using credit card or bank account payments, or to pay by invoice using check or electronic funds transfer (EFT). Whichever method you choose, that is the payment method we will continue to use for subsequent billing periods, unless you change your payment method.
Pay by credit card or bank account
When you pay by credit card or bank account, you’ll be automatically charged for your subscription the day after the invoice date, until the end of your subscription term.
Pay by invoice (check or EFT)
If your subscription costs over a certain amount of money (this amount varies by service location), you’ll have the option to pay by invoice by using a check or EFT. A credit check may be required for larger invoice payments.

What is Microsoft 365 Business?
Microsoft 365 is an integrated solution that brings together best-in-class productivity tools, security, and device management capabilities for small to medium-sized businesses. It includes:
A set of business productivity and collaboration tools
Word, Excel, PowerPoint, Outlook, OneNote, Publisher, and Access
Exchange, OneDrive, Skype for Business, Microsoft Teams, and SharePoint.
Business apps from Office (Bookings, MileIQ1).

Who should consider adopting Microsoft 365 Business?
Microsoft 365 Business is a comprehensive, cloud-based security solution that lets you:
Defend your business against advanced cyberthreats with sophisticated phishing and ransomware protection.
Control access to sensitive information by using encryption to keep data from being accidentally shared with someone not authorized to see it.
Secure the devices that connect to your business and help keep your data on iOS, Android, Windows, and Mac devices secure, and your Windows devices up to date.
Microsoft 365 Business is fully integrated with Office 365 to provide you with a familiar location for administration, billing, and 24×7 support. It consists of enterprise-grade technology built for businesses with fewer than 300 employees.

SaaS: Software as a Service
Software as a Service, also known as cloud application services, represents the most commonly utilized option for businesses in the cloud market. SaaS utilizes the internet to deliver applications, which are managed by a third-party vendor, to its users. A majority of SaaS applications run directly through your web browser, which means they do not require any downloads or installations on the client side.
When to Use SaaS?
SaaS may be the most beneficial option in several situations, including:
Startups or small companies that need to launch ecommerce quickly and don’t have time for server issues or software
Short-term projects that require quick, easy, and affordable collaboration
Applications that aren’t needed too often, such as tax software
Applications that need both web and mobile access
Examples of SaaS
These are several popular examples of SaaS, including: Google GSuite (Apps), Dropbox, Salesforce, Cisco WebEx, SAP Concur, and GoToMeeting.

PaaS: Platform as a Service
Cloud platform services, also known as Platform as a Service (PaaS), provide cloud components to certain software while being used mainly for applications. PaaS delivers a framework for developers that they can build upon and use to create customized applications. All servers, storage, and networking can be managed by the enterprise or a third-party provider while the developers can maintain management of the applications.
When to Use PaaS?
Utilizing PaaS is beneficial, sometimes even necessary, in several situations. For example, PaaS can streamline workflows when multiple developers are working on the same development project. If other vendors must be included, PaaS can provide great speed and flexibility to the entire process. PaaS is particularly beneficial if you need to create customized applications. This cloud service also can greatly reduce costs and it can simplify some challenges that come up if you are rapidly developing or deploying an app.
Examples of PaaS
Popular examples of PaaS include AWS Elastic Beanstalk, Windows Azure, Heroku, Force.com, Google App Engine, and OpenShift.

IaaS: Infrastructure as a Service
Cloud infrastructure services, known as Infrastructure as a Service (IaaS), are made of highly scalable and automated compute resources. IaaS is fully self-service for accessing and monitoring computers, networking, storage, and other services. IaaS allows businesses to purchase resources on-demand and as-needed instead of having to buy hardware outright.
When to Use IaaS?
Just as with SaaS and PaaS, there are specific situations when IaaS is most advantageous.
Startups and small companies may prefer IaaS to avoid spending time and money on purchasing and creating hardware and software. Larger companies may prefer to retain complete control over their applications and infrastructure, but they want to purchase only what they actually consume or need. Companies experiencing rapid growth like the scalability of IaaS, and they can change out specific hardware and software easily as their needs evolve. Anytime you are unsure of a new application’s demands, IaaS offers plenty of flexibility and scalability.
Examples of IaaS
Popular examples of IaaS include DigitalOcean, Linode, Rackspace, Amazon Web Services (AWS), Cisco Metacloud, Microsoft Azure, and Google Compute Engine (GCE).

It found that Microsoft Cloud services[i] are up to 93 percent more energy efficient and up to 98 percent more carbon efficient than traditional enterprise datacenters. To put that into context, if just 20 percent of the existing U.S. on-premises market moved to the Microsoft Cloud, it would be equivalent to reducing the city-wide emissions of Seattle, Washington or Torino, Italy. Across every scenario, and even compared to virtualized, high-end datacenters, the Microsoft Cloud is delivering big gains in energy efficiency and reductions in carbon emissions.

What is a private cloud?
A private cloud consists of computing resources used exclusively by one business or organization. The private cloud can be physically located at your organization’s on-site datacenter, or it can be hosted by a third-party service provider. But in a private cloud, the services and infrastructure are always maintained on a private network and the hardware and software are dedicated solely to your organization. In this way, a private cloud can make it easier for an organization to customize its resources to meet specific IT requirements. Private clouds are often used by government agencies, financial institutions, any other mid- to large-size organizations with business-critical operations seeking enhanced control over their environment.

Advantages of a private clouds:
More flexibility—your organization can customize its cloud environment to meet specific business needs.
Improved security—resources are not shared with others, so higher levels of control and security are possible.
High scalability—private clouds still afford the scalability and efficiency of a public cloud.

Disadvantages of private cloud
Cost: With exclusivity comes increased cost. …
Under-utilisation: With a private cloud, the cost of capacity under-utilisation is a cost to you, not to your provider.
https://azure.microsoft.com/is-is/overview/what-are-private-public-hybrid-clouds/

Nearly two thirds of Fortune 500 companies use Microsoft Azure for their cloud computing solution and an average of 1,000 customers are signing up every day. The benefits of the cloud are well documented: spinning up virtual machines in minutes, providing scalable and durable cloud storage, and backup and recovery solutions for businesses of all sizes.
Benefits of Microsoft Cloud Services:
Security: Microsoft provides some of the most advanced security technology in the  industry so you can be confident your data is safely protected.

Privacy
With Azure, you own and control the collection, use, and distribution of your customer data. Microsoft provides in depth information on how they will handle your data. You know how they will manage your data, where it is geographically located, and who has access and on what terms. Microsoft will not disclose your customer data hosted on Azure to a governments or law enforcement except as you direct or where required by law.

High Availability and Scalability
Unlike many other cloud service providers, Azure provides high availability and redundancy because of Microsoft’s vast global footprint. With data centers located in all parts of the world, Azure can offer service level agreements guaranteeing 99.95 percent up time.
Cost Effectiveness
Azure offers a pay-as-you go payment plan that allows businesses to have better control over their IT budgets since they purchase only what they need.