PROTECT, DETECT, AND RESPOND TO CLOUD SECURITY THREATS
Microsoft’s philosophy about security is to Protect, Detect, and Respond. Protection occurs at many layers, from tight physical security in the Azure and Office 365 data centers, to endpoint malware detection and data rights management services. If (when) a breach occurs, their machine learning algorithms detect anomalies, then alert tenant administrators and/or take predefined actions to respond to the issue. For instance, if (when) an account logs in from the USA and then, minutes later, from China, alerts can be sent and the account disabled.
You can learn more about the problems Microsoft is solving by clicking on the Threat Triangle below. Click on the specific Threat entry point for more in depth information.