Detections
Analytics

MS.SHAREPOINT.1.3v1 - External sharing SHALL be restricted to approved external domains and/or users in approved security groups per interagency collaboration needs.

Information

By limiting sharing to domains or approved security groups used for interagency collaboration purposes, administrators can help prevent sharing with unknown organizations and individuals.

Solution

Note: If SharePoint external sharing is set to its most restrictive setting of "Only people in your organization", then no external sharing is allowed and no implementation changes are required for this policy item.

1. Sign in to the SharePoint admin center.

2. Select Policies \> Sharing.

3. Expand More external sharing settings.

4. Select Limit external sharing by domain.

5. Select Add domains.

6. Add each approved external domain users are allowed to share files with.

7. Select Manage security groups

8. Add each approved security group. Members of these groups will be allowed to share files externally.

9. Select Save.

See Also

https://github.com/cisagov/ScubaGear/tree/v1.8.0/

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-3, 800-53|AC-6(10)

Plugin: microsoft_azure

Control ID: 27bdaa301b2e6a2009a327378f503d90dd21678785824dc80b5fa464d6ea49e6