A company has recently experienced a data breach involving sensitive customer information stored in Microsoft 365. They need to improve their data security measures to prevent future breaches. How would you evaluate and implement Microsoft Defender for Office to enhance their security?