CIS Zoom L1 v1.0.0

Audit Details

Name: CIS Zoom L1 v1.0.0

Updated: 3/7/2023

Authority: CIS

Plugin: Zoom

Revision: 1.2

Estimated Item Count: 58

File Details

Filename: CIS_Zoom_Level_1_v1.0.0.audit

Size: 56.6 kB

MD5: 744cfb656ac2c9624ca1dcf67473c794
SHA256: fa3c69288c3d9a52d7e885041c5efd1af74ffba16319af70e25bee0d85a4be82

Audit Items

DescriptionCategories
1.1.1.1.1 Ensure minimum passcode length is set to at least 6 characters

CONFIGURATION MANAGEMENT

1.1.1.1.2 Ensure passcode is set to have at least 1 letter

CONFIGURATION MANAGEMENT

1.1.1.1.3 Ensure passcode is set to have at least 1 number

CONFIGURATION MANAGEMENT

1.1.1.1.8 Ensure only allow numeric passcode is set to disabled

CONFIGURATION MANAGEMENT

1.1.1.2 Ensure waiting room is set to enabled

CONFIGURATION MANAGEMENT

1.1.1.3 Ensure waiting room options is set to everyone

CONFIGURATION MANAGEMENT

1.1.1.4 Ensure require a passcode when scheduling new meetings is set to enabled

CONFIGURATION MANAGEMENT

1.1.1.6 Ensure require a password for instant meetings is set to enabled

CONFIGURATION MANAGEMENT

1.1.1.7 Ensure require a password for Personal Meeting ID (PMI) is set to enabled

CONFIGURATION MANAGEMENT

1.1.1.8 Ensure embed password in meeting link for one-click join is set to enabled

CONFIGURATION MANAGEMENT

1.1.1.10 Ensure require password for participants joining by phone is set to enabled

CONFIGURATION MANAGEMENT

1.1.2.1.1 Have a minimum password length

CONFIGURATION MANAGEMENT

1.1.2.1.2 Specify a password length:

CONFIGURATION MANAGEMENT

1.1.2.1.3 Have at least 1 letter (a, b, c...)

CONFIGURATION MANAGEMENT

1.1.2.1.4 Have at least 1 number (1, 2, 3...)

CONFIGURATION MANAGEMENT

1.1.2.2 Ensure host video is set to disabled

CONFIGURATION MANAGEMENT

1.1.2.3 Ensure participants video is set to disabled

CONFIGURATION MANAGEMENT

1.1.2.4 Ensure join before host is set to disabled

CONFIGURATION MANAGEMENT

1.1.2.5 Ensure enable personal meeting ID is set to enabled

CONFIGURATION MANAGEMENT

1.1.2.12 Ensure mute participants upon entry is set to enabled

CONFIGURATION MANAGEMENT

1.1.3.2.1 Ensure sound notification when someone joins or leaves is set to enabled

CONFIGURATION MANAGEMENT

1.1.3.2.2 Ensure play sound for 'Host and co-host only' is set to enabled

CONFIGURATION MANAGEMENT

1.1.3.2.3 Ensure when someone joins by phone, ask to record their voice to use as the notification is set to enabled

CONFIGURATION MANAGEMENT

1.1.3.3.1 Ensure hosts and participants can send files through the in-meeting chat is set to disabled

CONFIGURATION MANAGEMENT

1.1.3.4.1 Ensure screen sharing is set to enabled

CONFIGURATION MANAGEMENT

1.1.3.4.2 Ensure 'who can share?' is set to 'Host Only'

CONFIGURATION MANAGEMENT

1.1.3.4.3 Ensure 'Who can start sharing when someone else is sharing?' is set to 'Host Only'

CONFIGURATION MANAGEMENT

1.1.3.7 Ensure require encryption for 3rd party endpoints (SIP/H.323) is set to enabled

CONFIGURATION MANAGEMENT

1.1.3.8 Ensure allow meeting participants to send a private 1:1 message to another participant is set to disabled

CONFIGURATION MANAGEMENT

1.1.3.9 Ensure auto saving chats is set to enabled

CONFIGURATION MANAGEMENT

1.1.3.11 Ensure co-host is set to enabled

CONFIGURATION MANAGEMENT

1.1.3.19 Ensure allow removed participants to rejoin is set to disabled

CONFIGURATION MANAGEMENT

1.1.3.20 Ensure allow participants to rename themselves is set to enabled

CONFIGURATION MANAGEMENT

1.1.4.1.1 Ensure select data center regions for meetings/webinars hosted by your account is set to enabled

CONFIGURATION MANAGEMENT

1.1.4.1.2 Ensure data center regions is set to local countries

CONFIGURATION MANAGEMENT

1.1.4.3.1 Ensure virtual background is set to enabled

CONFIGURATION MANAGEMENT

1.1.4.3.2 Ensure allow use of videos for virtual backgrounds is set to disabled

CONFIGURATION MANAGEMENT

1.1.4.3.3 Ensure allow users to upload custom backgrounds is set to disabled

CONFIGURATION MANAGEMENT

1.1.4.5 Ensure report participants to Zoom is set to enabled

CONFIGURATION MANAGEMENT

1.1.4.9 Ensure far end camera control is set to disabled

CONFIGURATION MANAGEMENT

1.1.4.10 Ensure identify guest participants in the meeting/webinar is set to enabled

CONFIGURATION MANAGEMENT

1.1.4.11 Ensure auto-answer group in chat is set to disabled

CONFIGURATION MANAGEMENT

1.1.4.14 Ensure show a 'Join from your browser' link is set to enabled

CONFIGURATION MANAGEMENT

1.1.5.1 Ensure calendar and contacts integration is set to disabled

CONFIGURATION MANAGEMENT

1.1.6.1.1 Ensure when a cloud recording is available is set to enabled

CONFIGURATION MANAGEMENT

1.1.6.2 Ensure when attendees join meeting before host is set to enabled

CONFIGURATION MANAGEMENT

1.1.6.3 Ensure when a meeting is cancelled is set to enabled

CONFIGURATION MANAGEMENT

1.1.6.5 Enable when someone scheduled a meeting for a host is set to enabled

CONFIGURATION MANAGEMENT

1.1.6.6 Ensure when the cloud recording is going to be permanently deleted from trash is set to enabled

CONFIGURATION MANAGEMENT

1.2.2.1 Ensure cloud recording is set to enabled

CONFIGURATION MANAGEMENT