Detections
Analytics

MS.SHAREPOINT.2.1v1 - File and folder default sharing scope SHALL be set to "Specific people (only the people the user specifies)".

Information

By making the default sharing the most restrictive, administrators prevent accidentally sharing information too broadly.

Solution

1. Sign in to the SharePoint admin center.

2. Select Policies \> Sharing

3. Under File and folder links, set the default link type to Specific people (only the people the user specifies)

4. Select Save

See Also

https://github.com/cisagov/ScubaGear/tree/v1.8.0/

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6

Plugin: microsoft_azure

Control ID: f8f2e072b71e210d950c6e7a110659b2727c7578c7ccc8c2b0efb115c1a9cdfd