rules/findings/m365/microsoft_sways/sway-external-sharing-enabled.json

{
    "provider": "Microsoft365",
    "serviceType": "Microsoft Sway",
    "serviceName": "Microsoft 365",
    "displayName": "Ensure that Sways cannot be shared with people outside of your organization",
    "description": "Disable external sharing of Sway items such as reports, newsletters, presentations etc that could contain sensitive information.",
    "rationale": "Disable external sharing of Sway documents that can contain sensitive information to prevent accidental or arbitrary data leak.",
    "impact": "Interactive reports, presentations, newsletters and other items created in Sway will not be shared outside the organization by users.",
    "remediation": {
        "text": "###### To ensure Sways cannot be viewed outside of your organization use the Microsoft 365 Admin Center\r\n\t\t\t\t\t1. Expand `Settings` then select `Org settings`.\r\n\t\t\t\t\t2. Under Services select `Sway`.\r\n\t\t\t\t\t3. Under `Sharing` uncheck the following:\r\n\t\t\t\t\t3.1 Let people in your organization share their sways with people outside your organization\r\n\t\t\t\t\t4. Click `Save`",
        "code": {
            "powerShell": null,
            "iac": null,
            "terraform": null,
            "other": null
        }
    },
    "recommendation": null,
    "references": [
        "https://support.microsoft.com/en-us/office/administrator-settings-for-sway-d298e79b-b6ab-44c6-9239-aa312f5784d4"
    ],
    "compliance": [
        {
            "name": "CIS Microsoft 365 Foundations Benchmark",
            "version": "7.0.0",
            "reference": "1.3.8",
            "profile": [
                "E3 Level 2",
                "E5 Level 2"
            ]
        }
    ],
    "level": "medium",
    "tags": [
    ],
    "rule": {
        "path": null,
        "subPath": null,
        "selectCondition": {
             
        },
        "query": [
        ],
        "shouldExist": null,
        "returnObject": null,
        "removeIfNotExists": null
    },
    "output": {
        "html": {
            "data": {
                "properties": {
                     
                },
                "expandObject": null
            },
            "table": null,
            "decorate": [
                 
            ],
            "emphasis": [
                 
            ],
            "actions": {
                "objectData": {
                    "properties": [
                        "*"
                    ],
                    "expandObject": null,
                    "limit": null
                },
                "showGoToButton": false,
                "showModalButton": false,
                "directLink": null
            }
        },
        "text": {
            "data": {
                "properties": {
                     
                },
                "expandObject": null
            },
            "status": {
                "keyName": [
                     
                ],
                "message": "Ensure that Sways cannot be shared with people outside of your organization",
                "defaultMessage": "Ensure that Sways cannot be shared with people outside of your organization"
            },
            "properties": {
                "resourceName": null,
                "resourceId": null,
                "resourceType": null
            },
            "onlyStatus": false
        }
    },
    "idSuffix": "m365_sway_external_sharing_enabled",
    "notes": [
         
    ],
    "categories": [
         
    ],
    "immutable_properties": [
         
    ],
    "id": "microsoft365_2164"
}