Stefan Wey
➔ _ Microsoft 365 _ | _ MCT (Trainer) _ , _ 🪪 Identity (Entra),✉ Mail (Exchange), 👥Collaboration (
🏢 UMB AG🇨🇭 Switzerland
Tests authored
- CIS.M365.6.5.3(L2) Ensure additional storage providers are restricted in Outlook on the web
- MT.1037Only users with Presenter role are allowed to present in Teams meetings
- MT.1039Ensure MailTips are enabled for end users
- MT.1041Ensure users installing Outlook add-ins is not allowed
- MT.1042Restrict dial-in users from bypassing a meeting lobby
- MT.1043Ensure Spam confidence level (SCL) is configured in mail transport rules with specific domains
- MT.1044Ensure modern authentication for Exchange Online is enabled
- MT.1045Only invited users should be automatically admitted to Teams meetings
- MT.1046Restrict anonymous users from joining meetings
- MT.1047Restrict anonymous users from starting Teams meetings
- MT.1048Limit external participants from having control in a Teams meeting
Also contributed to
- CIS.M365.2.1.4(L2) Ensure Safe Attachments policy is enabled (Only Checks Default Policy)
- CISA.MS.AAD.5.4Group owners SHALL NOT be allowed to consent to applications.
- CISA.MS.EXO.2.1A list of approved IP addresses for sending mail SHALL be maintained.
- MT.1001At least one Conditional Access policy is configured with device compliance.
- MT.1008At least one Conditional Access policy is configured to require MFA for Azure management.
- MT.1020All Conditional Access policies are configured to exclude Directory/OnPremises synchronization accounts or do not scope them.
- MT.1021Security Defaults are enabled.
- MT.1024Entra recommendations should be completed.
- MT.1036All excluded objects should have a fallback include in another policy.