In the default security policy, you can set a custom protection scope by selecting sites that you want to protect in the policy.
Depending on the size of the Office 365 organization and the number of selected sites, it may take up to several hours to update the protection scope.
Protected sites
To configure sites that you want to protect in the policy:
To filter the list of sites, use the Search entry field or the Display the following sites list (available values are All, Selected, and Not selected).
The sites are listed alphabetically. By default, the list of sites is arranged by 10 lines per page. You can switch the pages of the list back and forth or change the default number of displayed lines per page at the bottom of the page.
If necessary, you can force the application to retrieve the list of SharePoint Online sites by clicking the Synchronize list link above the list.
Excluded sites
To configure sites that you want to exclude from protection:
To filter the list of sites, use the Search entry field or the Display the following sites list (available values are All, Selected, and Not selected).
The sites are listed alphabetically. By default, the list of sites is arranged by 10 lines per page. You can switch the pages of the list back and forth or change the default number of displayed lines per page at the bottom of the page.
If the same site is listed as a protected item but is also added to the list of exclusions, the exclusion has priority over the general protection scope settings.
If necessary, you can force the application to retrieve the list of SharePoint Online sites by clicking the Synchronize list link above the list.
Page top