controls/risk-severity.json
|
{
"description": "Risk severity assignments for M365-Assess security checks", "version": "1.0.0", "severityScale": [ "Critical", "High", "Medium", "Low", "Info" ], "checks": { "CA-DEVICE-001": "High", "CA-DEVICE-002": "Info", "CA-DEVICECODE-001": "High", "CA-INTUNE-001": "High", "CA-LEGACYAUTH-001": "Critical", "CA-MFA-ADMIN-001": "Critical", "CA-MFA-ALL-001": "Critical", "CA-PHISHRES-001": "Critical", "CA-SIGNIN-FREQ-001": "High", "CA-SIGNINRISK-001": "Critical", "CA-SIGNINRISK-002": "Critical", "CA-USERRISK-001": "Critical", "COMPLIANCE-AUDIT-001": "High", "COMPLIANCE-DLP-001": "High", "COMPLIANCE-DLP-002": "High", "COMPLIANCE-LABELS-001": "Info", "DEFENDER-ANTIMALWARE-001": "High", "DEFENDER-ANTIMALWARE-002": "High", "DEFENDER-ANTIPHISH-001": "High", "DEFENDER-ANTISPAM-001": "High", "DEFENDER-ANTISPAM-002": "High", "DEFENDER-MALWARE-002": "Medium", "DEFENDER-OUTBOUND-001": "High", "DEFENDER-PRIORITY-001": "Medium", "DEFENDER-PRIORITY-002": "Medium", "DEFENDER-SAFEATTACH-001": "High", "DEFENDER-SAFEATTACH-002": "High", "DEFENDER-SAFELINKS-001": "High", "DEFENDER-ZAP-001": "Medium", "DNS-DKIM-001": "High", "DNS-DMARC-001": "High", "DNS-SPF-001": "High", "ENTRA-ADMIN-001": "High", "ENTRA-ADMIN-002": "High", "ENTRA-ADMIN-003": "High", "ENTRA-ADMIN-004": "Critical", "ENTRA-APPREG-001": "Medium", "ENTRA-APPS-001": "Medium", "ENTRA-AUTHMETHOD-001": "Critical", "ENTRA-AUTHMETHOD-002": "Critical", "ENTRA-AUTHMETHOD-003": "Critical", "ENTRA-AUTHMETHOD-004": "Critical", "ENTRA-CA-001": "Critical", "ENTRA-CA-002": "Medium", "ENTRA-CA-003": "Medium", "ENTRA-CLOUDADMIN-001": "Critical", "ENTRA-CLOUDADMIN-002": "Critical", "ENTRA-CONSENT-001": "Medium", "ENTRA-CONSENT-002": "High", "ENTRA-ENTAPP-001": "Medium", "ENTRA-ENTAPP-002": "High", "ENTRA-ENTAPP-003": "Critical", "ENTRA-ENTAPP-004": "High", "ENTRA-ENTAPP-005": "High", "ENTRA-ENTAPP-006": "Medium", "ENTRA-ENTAPP-007": "Medium", "ENTRA-ENTAPP-008": "Critical", "ENTRA-ENTAPP-009": "High", "ENTRA-ENTAPP-010": "Critical", "ENTRA-ENTAPP-011": "High", "ENTRA-ENTAPP-012": "Medium", "ENTRA-ENTAPP-013": "Medium", "ENTRA-ENTAPP-014": "Low", "ENTRA-ENTAPP-015": "Critical", "ENTRA-ENTAPP-016": "Critical", "ENTRA-ENTAPP-017": "High", "ENTRA-ENTAPP-018": "Medium", "ENTRA-ENTAPP-019": "High", "ENTRA-ENTAPP-020": "High", "ENTRA-ENTAPP-021": "Low", "ENTRA-APPREG-002": "Medium", "ENTRA-APPREG-003": "High", "ENTRA-APPREG-004": "Critical", "ENTRA-CONSENT-003": "High", "ENTRA-CONSENT-004": "Medium", "ENTRA-DEVICE-001": "Medium", "ENTRA-DEVICE-002": "High", "ENTRA-DEVICE-003": "High", "ENTRA-DEVICE-004": "High", "ENTRA-DEVICE-005": "High", "ENTRA-DEVICE-006": "Medium", "ENTRA-GROUP-001": "High", "ENTRA-GROUP-002": "High", "ENTRA-GROUP-003": "Medium", "ENTRA-GUEST-001": "High", "ENTRA-GUEST-002": "Medium", "ENTRA-GUEST-003": "Medium", "ENTRA-GUEST-004": "Medium", "ENTRA-HYBRID-001": "High", "ENTRA-LINKEDIN-001": "Medium", "ENTRA-MFA-001": "Critical", "ENTRA-ORGSETTING-001": "High", "ENTRA-ORGSETTING-002": "High", "ENTRA-ORGSETTING-003": "Medium", "ENTRA-ORGSETTING-004": "High", "ENTRA-PASSWORD-001": "High", "ENTRA-PASSWORD-002": "High", "ENTRA-PASSWORD-003": "Medium", "ENTRA-PASSWORD-004": "Medium", "ENTRA-PASSWORD-005": "High", "ENTRA-PERUSER-001": "Critical", "ENTRA-PIM-001": "Medium", "ENTRA-PIM-002": "Medium", "ENTRA-PIM-003": "Medium", "ENTRA-PIM-004": "Medium", "ENTRA-PIM-005": "Medium", "ENTRA-SECDEFAULT-001": "Medium", "ENTRA-SECDEFAULT-002": "Medium", "ENTRA-SSPR-001": "High", "ENTRA-TENANT-001": "High", "EXO-ADDINS-001": "Medium", "EXO-AUDIT-001": "High", "EXO-AUDIT-002": "High", "EXO-AUDIT-003": "High", "EXO-AUTH-001": "Critical", "EXO-AUTH-002": "Critical", "EXO-CONNFILTER-001": "High", "EXO-CONNFILTER-002": "High", "EXO-DIRECTSEND-001": "Medium", "EXO-EXTTAG-001": "High", "EXO-FORWARD-001": "High", "EXO-HIDDEN-001": "Medium", "EXO-LOCKBOX-001": "High", "EXO-MAILTIPS-001": "High", "EXO-OWA-001": "Medium", "EXO-SHAREDMBX-001": "High", "EXO-SHARING-001": "High", "EXO-TRANSPORT-001": "High", "FORMS-CONFIG-001": "High", "FORMS-CONFIG-002": "High", "FORMS-CONFIG-003": "Medium", "FORMS-CONFIG-004": "High", "FORMS-CONFIG-005": "Medium", "FORMS-CONFIG-006": "Medium", "INTUNE-COMPLIANCE-001": "High", "INTUNE-ENROLL-001": "Medium", "POWERBI-AUTH-001": "Critical", "POWERBI-AUTH-002": "Critical", "POWERBI-AUTH-003": "Critical", "POWERBI-GUEST-001": "High", "POWERBI-GUEST-002": "High", "POWERBI-GUEST-003": "High", "POWERBI-INFOPROT-001": "High", "POWERBI-SHARING-001": "High", "POWERBI-SHARING-002": "High", "POWERBI-SHARING-003": "High", "POWERBI-SHARING-004": "High", "PURVIEW-RETENTION-001": "Medium", "PURVIEW-RETENTION-002": "Medium", "PURVIEW-RETENTION-003": "Medium", "PURVIEW-RETENTION-004": "Medium", "PURVIEW-RETENTION-005": "Medium", "SPO-AUTH-001": "Critical", "SPO-B2B-001": "High", "SPO-LOOP-001": "Medium", "SPO-LOOP-002": "Medium", "SPO-MALWARE-002": "Medium", "SPO-OD-001": "Medium", "SPO-SCRIPT-001": "Medium", "SPO-SCRIPT-002": "Medium", "SPO-SESSION-001": "Low", "SPO-SHARING-001": "High", "SPO-SHARING-002": "High", "SPO-SHARING-003": "High", "SPO-SHARING-004": "High", "SPO-SHARING-005": "High", "SPO-SHARING-006": "High", "SPO-SHARING-007": "High", "SPO-SHARING-008": "High", "SPO-SYNC-001": "Medium", "SPO-SYNC-002": "Medium", "TEAMS-APPS-001": "Medium", "TEAMS-APPS-002": "High", "TEAMS-CLIENT-001": "Medium", "TEAMS-CLIENT-002": "High", "TEAMS-EXTACCESS-001": "High", "TEAMS-EXTACCESS-002": "High", "TEAMS-EXTACCESS-003": "Medium", "TEAMS-EXTACCESS-004": "High", "TEAMS-INFO-001": "Medium", "TEAMS-MEETING-001": "Medium", "TEAMS-MEETING-002": "High", "TEAMS-MEETING-003": "High", "TEAMS-MEETING-004": "High", "TEAMS-MEETING-005": "High", "TEAMS-MEETING-006": "Medium", "TEAMS-MEETING-007": "Medium", "TEAMS-MEETING-008": "Medium", "TEAMS-MEETING-009": "Medium", "TEAMS-REPORTING-001": "High" } } |