SharePoint

20 checks20 Medium

External sharing12Sharing links6Access control2

Run theseInvoke-Maester -Product sharepointCopy

20 checks

Group byFeatureAreaSeveritySuiteNone

IDCheckFeatureSeverity

CIS.M365.7.2.1Ensure modern authentication for SharePoint applications is requiredNew in 3.0Access controlMediumCIS.M365.7.2.2Ensure SharePoint and OneDrive integration with Azure AD B2B is enabledExternal sharingMediumCIS.M365.7.2.3Ensure external content sharing is restrictedNew in 3.0External sharingMediumCIS.M365.7.2.4Ensure OneDrive content sharing is restrictedNew in 3.0External sharingMediumCIS.M365.7.2.5Ensure that SharePoint guest users cannot share items they don't ownExternal sharingMediumCIS.M365.7.2.6Ensure SharePoint external sharing is managed through domain whitelist/blacklistsNew in 3.0External sharingMediumCIS.M365.7.2.7Ensure link sharing is restricted in SharePoint and OneDriveSharing linksMediumCIS.M365.7.2.8Ensure external sharing is restricted by security groupNew in 3.0External sharingMediumCIS.M365.7.2.9Ensure guest access to a site or OneDrive will expire automaticallyExternal sharingMediumCIS.M365.7.2.10Ensure reauthentication with verification code is restrictedNew in 3.0External sharingMediumCIS.M365.7.2.11Ensure the SharePoint default sharing link permission is setSharing linksMediumCIS.M365.7.3.1Ensure Office 365 SharePoint infected files are disallowed for downloadAccess controlMediumCISA.MS.SHAREPOINT.1.1External sharing for SharePoint SHALL be limited to Existing guests or Only People in your organization.External sharingMediumCISA.MS.SHAREPOINT.1.2External sharing for OneDrive SHALL be limited to Existing guests or Only People in your organization.External sharingMediumCISA.MS.SHAREPOINT.1.3External sharing SHALL be restricted to approved external domains and/or users in approved security groups per interagency collaboration needs.External sharingMediumCISA.MS.SHAREPOINT.2.1File and folder default sharing scope SHALL be set to Specific People.Sharing linksMediumCISA.MS.SHAREPOINT.2.2File and folder default sharing permissions SHALL be set to View only.Sharing linksMediumCISA.MS.SHAREPOINT.3.1Expiration days for Anyone links SHALL be set to 30 days or less.Sharing linksMediumCISA.MS.SHAREPOINT.3.2Allowable file and folder permissions for Anyone links SHALL be set to View only.Sharing linksMediumCISA.MS.SHAREPOINT.3.3Reauthentication days for people who use a verification code SHALL be set to 30 days or less.External sharingMedium