A Microsoft 365 tenant had more than 50,000 guest users and no process to review them. Five governance decisions for Microsoft Entra B2B collaboration keep that from happening, from who can invite to how guest access ends. A cost model prices an inactive-guest cleanup under today's Entra ID Governance billing and sets it against the cost of a breach. Written for Entra admins, architects, and the CISOs who fund them.