CISA.MS.SHAREPOINT.1.1 - External sharing for SharePoint SHALL be limited to Existing guests or Only People in your organization.

Overview

External sharing for SharePoint SHALL be limited to Existing guests or Only People in your organization.

Rationale: Sharing information outside the organization via SharePoint increases the risk of unauthorized access. By limiting external sharing, administrators decrease the risk of access to information.

Remediation action:

1. Sign in to the SharePoint admin center.
2. Select Policies > Sharing.
3. Adjust external sharing slider for SharePoint to Existing guests or Only people in your organization.

⚠️ WARNING: This will break existing sharing.

4. Select Save.

Related links

• CISA 1 External Sharing - MS.SHAREPOINT.1.1v1
• CISA ScubaGear Rego Reference

Test Metadata

Field	Value
Test ID	CISA.MS.SHAREPOINT.1.1
Severity	Medium
Suite	CISA
Category	spo
PowerShell test	Test-MtCisaSpoSharing
Tags	CISA, CISA.MS.SHAREPOINT.1.1, MS.SHAREPOINT, MS.SHAREPOINT.1.1

Source

• Pester test: tests/cisa/spo/Test-MtCisaSpoSharing.Tests.ps1
• PowerShell source: powershell/public/cisa/spo/Test-MtCisaSpoSharing.ps1