Password Policy: Minimum 12 characters, uppercase, lowercase, number, special character required. Multi-factor authentication enforced. Managed by Azure Active Directory.

Security events are logged including authentication attempts, access control changes, and data modifications.