The NSA, CISA, Australia's Cyber Security Centre, and Canada's Cyber Centre jointly released comprehensive security practices for Exchange hardening.