Detections
Analytics

MS.EXO.6.2v1 - Calendar details SHALL NOT be shared with all domains.

Information

Calendar details may contain information that should not be shared by default with all domains. Disabling sharing with all domains closes an avenue for data exfiltration while still allowing for legitimate use as needed.

Solution

To restrict sharing calendar details with all domains:

1. Refer to step 5 in [MS.EXO.6.1v1 Instructions](#msexo61v1-instructions) to implement
this policy.

See Also

https://github.com/cisagov/ScubaGear/tree/v1.8.0/

Item Details

Category: ACCESS CONTROL, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|AC-3, 800-53|SC-7(10)

Plugin: microsoft_azure

Control ID: 99b0e61827bdb82fb3e057ac771d69d8d037e9661794c31bfd02be888ce9aef3