Microsoft offers Office 365 administrators the opportunity to measure the security of their tenant against standard benchmarks set by Microsoft. Despite some glitches, the Secure Score service is a worthwhile and useful tool.
https://www.petri.com/office-365-secure-score
