Detections
Analytics

MS.SHAREPOINT.3.1v1 - Expiration days for Anyone links SHALL be set to 30 days or less.

Information

Links may be used to provide access to information for a short period of time. Without expiration, however, access is indefinite. By setting expiration timers for links, administrators can prevent unintended sustained access to the link.

Solution

1. Sign in to the SharePoint admin center.

2. Select Policies \> Sharing.

3. Scroll to the section Choose expiration and permissions options for Anyone links.

4. Select the checkbox These links must expire within this many days.

5. Enter 30 days or less.

6. Select Save.

See Also

https://github.com/cisagov/ScubaGear/tree/v1.8.0/

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-3, 800-53|AC-21b.

Plugin: microsoft_azure

Control ID: a47ffbd8041689d008f741ea98778e6790dd1ea5df972f18407d6910f8273da8