We are currently implementing changes to our Office 365 domain in line with the Office 365 Secure score, some improvements are fairly straight forward (Running reports, setting up MFA's and disabling certain rule) A few of the options are a little more in depth and require PowerShell to implement.
Our score has now improved from 36 to 217 however, I expect this to increase further once Microsoft release further updates to be able to score some of the options.