How do I prepare for a Microsoft 365 security audit?

“Preparing for a single day misses the point. You risk liability gaps if you do not maintain a permanently verifiable state where every security decision is documented and justified — beyond the audit date.”