Detections
Analytics

MS.SHAREPOINT.3.3v1 - Reauthentication days for people who use a verification code SHALL be set to 30 days or less.

Information

By setting expiration timers for verification code access, administrators can prevent unintended sustained access to documents.

Solution

1. Sign in to the SharePoint admin center.

2. Select Policies \> Sharing.

3. Expand More external sharing settings.

4. Select People who use a verification code must reauthenticate after this many days.

5. Enter 30 days or less.

6. Select Save.

`TLP:CLEAR`

See Also

https://github.com/cisagov/ScubaGear/tree/v1.8.0/

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-11

Plugin: microsoft_azure

Control ID: 99e6fb9a9120cedced3e4bfb44e16bdf4f5758bcecfbbbdf25ef7390e700d9c9