Skip to main content
Version: 2.1.1-preview

CISA.MS.SHAREPOINT.1.2 - External sharing for OneDrive SHALL be limited to Existing guests or Only People in your organization.

Overview​

External sharing for OneDrive SHALL be limited to Existing guests or Only People in your organization.

Rationale: Restricting OneDrive sharing reduces the risk of unauthorized data exposure from individual user storage. Allowing broad external sharing of OneDrive content increases the attack surface.

Remediation action:​

  1. Sign in to the SharePoint admin center.
  2. Select Policies > Sharing.
  3. Adjust external sharing slider for OneDrive to Existing guests or Only people in your organization.
  4. Select Save.

Test Metadata​

FieldValue
Test IDCISA.MS.SHAREPOINT.1.2
SeverityUnknown
SuiteCISA
Categoryspo
PowerShell testTest-MtCisaSpoOneDriveSharing
TagsCISA, CISA.MS.SHAREPOINT.1.2, MS.SHAREPOINT, MS.SHAREPOINT.1.2

Source​

  • Pester test: tests/cisa/spo/Test-MtCisaSpoOneDriveSharing.Tests.ps1
  • PowerShell source: powershell/public/cisa/spo/Test-MtCisaSpoOneDriveSharing.ps1