Detections
Analytics

MS.EXO.11.2v1 - User warnings, comparable to the user safety tips included with EOP, SHOULD be displayed.

Information

Many tasks are better suited for automated processes, such as identifying unusual characters in the `FROM` address or identifying a first-time sender. User warnings can handle these tasks, reducing the burden on end users and the risk of successful phishing attempts.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Any product meeting the requirements outlined in this baseline policy may be
used. If the agency uses Microsoft Defender, see the following
implementation steps for
[enabling preset security policies](./defender.md#msdefender12v1) which
include user safety tips to warn users.

See Also

https://github.com/cisagov/ScubaGear/tree/v1.8.0/

Item Details

Category: AWARENESS AND TRAINING, SYSTEM AND INFORMATION INTEGRITY

References: 800-53|AT-2, 800-53|SI-8

Plugin: microsoft_azure

Control ID: 63e04286ab057da88483d59eed17ab23c35dca50e1553f62b3d89faa36fa9a89