CIS Microsoft 365 Foundations E3 L2 v2.0.0

This audit file has been deprecated and will be removed in a future update.

Name: CIS Microsoft 365 Foundations E3 L2 v2.0.0

Updated: 12/4/2023

Authority: CIS

Plugin: microsoft_azure

Revision: 1.1

Estimated Item Count: 19

Filename: CIS_Microsoft_365_v2.0.0_E3_Level_2.audit

Size: 41.2 kB

MD5: 419f65ae7954960e6b089345b5337e36

SHA256: 0bccf200e3e1609188685cb20346beddf808ab6fff989dd4cd59b0b744951ef2

Description	Categories
1.1.6 Ensure 'Phishing-resistant MFA strength' is required for Administrators
1.1.16 Ensure that only organizationally managed/approved public groups exist
1.1.17 Ensure that collaboration invitations are sent to allowed domains only
1.1.18 Ensure 'LinkedIn account connections' is disabled
1.1.19 Ensure the option to remain signed in is hidden	ACCESS CONTROL
2.2 Ensure third party integrated applications are not allowed
2.3 Ensure 'External sharing' of calendars is not available
2.7 Ensure user consent to apps accessing company data on their behalf is not allowed
2.8 Ensure users installing Outlook add-ins is not allowed
3.2 Ensure SharePoint Online Information Protection policies are set up and used
3.3 Ensure 'external access' is restricted in the Teams admin center	CONFIGURATION MANAGEMENT
3.6 Ensure that SharePoint guest users cannot share items they don't own
3.7 Ensure external file sharing in Teams is enabled for only approved cloud storage services
4.11 Ensure MailTips are enabled for end users	CONFIGURATION MANAGEMENT
5.5 Ensure the Application Usage report is reviewed at least weekly
6.1 Ensure SharePoint external sharing is managed through domain whitelist/blacklists
6.2 Block OneDrive for Business sync from unmanaged devices	CONFIGURATION MANAGEMENT
6.4 Ensure 'third-party storage services' are restricted in 'Microsoft 365 on the web'
6.5 Ensure additional storage providers are restricted in Outlook on the web