Security Policy Advisor
Outside of Microsoft Intune, directly in the Microsoft 365 Apps admin center, there are more options for Office policy management.
Sign into the Apps Admin Center at https://config.office.com:
You have the option to use Security Policy Advisor, where you will be given intelligent recommendations for security policies based on how Microsoft 365 apps for enterprise are used:
Security Policy Advisor is turned Off by default and needs to be turned On:
After the policies have been assigned and applied to your users, you will start to see recommendations coming up in Security Policy Advisor. It will display New recommendations available in the Status column, and in the Recommended Policies column...