Detections
Analytics

MS.DEFENDER.4.2v1 - The custom policy SHOULD be applied to Exchange, OneDrive, SharePoint, Teams chat, and Devices.

Information

Unauthorized disclosures may happen through M365 services or endpoint devices. DLP policies should cover all affected locations to be effective.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

See [MS.DEFENDER.4.1v2 Instructions](#msdefender41v2-instructions) step 8
 for details on enforcing DLP policy in specific M365 service locations.

See Also

https://github.com/cisagov/ScubaGear/tree/v1.8.0/

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-7(10)

Plugin: microsoft_azure

Control ID: 4fc80f3b3d56cad71807abde7a8312a7e33d27e601bb6b9634b4e0399fe1076f