MS365 tenancy security health check suggestions

Are there any useful key controls checklists that could be used as a template to run some checks over an office 365 business tenancy (including Azure AD), to look for common security & access related...