One common question I see is what should be the first thing I do after I set up Azure AD? Luckily for you the Product Group has provided a nice article that covers that topic. Please do this first and get your peers on board. Most customers set up Azure AD, set up syncing and start using it, before ever thinking about security. It is never to late to start following this guidance!!!
Other Useful AAD Link: