Tests authored
- CIS.M365.5.2.3.1(L1) Ensure Microsoft Authenticator is configured to protect against MFA fatigue
- CIS.M365.5.2.3.2(L1) Ensure custom banned passwords lists are used
- CIS.M365.5.2.3.3(L1) Ensure password protection is enabled for on-prem Active Directory
- CIS.M365.5.2.3.4(L1) Ensure all member users are 'MFA capable'
- CIS.M365.5.2.3.6(L1) Ensure system-preferred multifactor authentication is enabled
- CIS.M365.5.2.3.7(L2) Ensure the email OTP authentication method is disabled
- CIS.M365.5.2.3.8(L1) Ensure that Account 'Lockout threshold' is '10' or less
- CIS.M365.5.2.3.9(L1) Ensure that Account 'Lockout duration in seconds' is at least 60 seconds
- CIS.M365.5.2.3.10(L1) Ensure Microsoft Authenticator on companion applications is disabled
- CIS.M365.5.3.1(L2) Ensure privileged role assignments are activated and not assigned
- CIS.M365.5.3.2(L1) Ensure 'Access reviews' for guest users are configured
- CIS.M365.5.3.3(L1) Ensure 'Access reviews' for privileged roles are configured
- CIS.M365.5.3.4(L1) Ensure approval is required for Global Administrator role activation
- CIS.M365.5.3.5(L1) Ensure approval is required for Privileged Role Administrator activation