Detections
Analytics

MS.DEFENDER.4.3v1 - The action for the custom policy SHOULD be set to block sharing sensitive information with everyone.

Information

Access to sensitive information should be prohibited unless explicitly allowed. Specific exemptions can be made based on agency policies and valid business justifications.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

See [MS.DEFENDER.4.1v2 Instructions](#msdefender41v2-instructions) steps
 15-17 for details on configuring DLP policy to block sharing sensitive
 information with everyone.

See Also

https://github.com/cisagov/ScubaGear/tree/v1.8.0/

Item Details

Category: ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|AC-3, 800-53|SC-7(10)

Plugin: microsoft_azure

Control ID: c06c1c20f711c52f073420ac45a295b518eb94f946f67a88bfdd6a01fb4d3add