Detections
Analytics

MS.TEAMS.2.3v2 - Internal users SHOULD NOT be enabled to initiate contact with unmanaged users.

Information

Contact with unmanaged users can pose the risk of data leakage and other security threats. This policy provides protection by disabling internal user access to unmanaged users.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

1. Sign in to the Microsoft Teams admin center.

2. Select Users > External access.

3. Select Policies.

4. Select Global (Org-wide Default).

4. To completely block contact with unmanaged users, under Edit policy details, set People in my organization can communicate with unmanaged Teams accounts to Off.

See Also

https://github.com/cisagov/ScubaGear/tree/v1.8.0/

Item Details

Category: CONFIGURATION MANAGEMENT, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|CM-7, 800-53|SC-7(10)

Plugin: microsoft_azure

Control ID: c7c5310c23b6610abf9fe2b19da2498b05e7d0ef39fc5a7546f58f5ca195f67a