CISA.MS.SHAREPOINT.2.2 - File and folder default sharing permissions SHALL be set to View only.

Overview

File and folder default sharing permissions SHALL be set to View only.

Rationale: Setting the default permission to View reduces the risk of accidental editing of shared documents by external parties.

Remediation action:

1. Sign in to the SharePoint admin center.
2. Select Policies > Sharing.
3. Under File and folder links, set the default link permission to View.
4. Select Save.

Related links

• CISA 2 Default Sharing Permission - MS.SHAREPOINT.2.2v1
• CISA ScubaGear Rego Reference

Test Metadata

Field	Value
Test ID	CISA.MS.SHAREPOINT.2.2
Severity	Unknown
Suite	CISA
Category	spo
PowerShell test	Test-MtCisaSpoDefaultSharingPermission
Tags	CISA, CISA.MS.SHAREPOINT.2.2, MS.SHAREPOINT, MS.SHAREPOINT.2.2

Source

• Pester test: tests/cisa/spo/Test-MtCisaSpoDefaultSharingPermission.Tests.ps1
• PowerShell source: powershell/public/cisa/spo/Test-MtCisaSpoDefaultSharingPermission.ps1