rules/findings/m365/microsoft_sways/sway-external-sharing-enabled.json
|
{
"provider": "Microsoft365", "serviceType": "Microsoft Sway", "serviceName": "Microsoft 365", "displayName": "Ensure that Sways cannot be shared with people outside of your organization", "description": "Disable external sharing of Sway items such as reports, newsletters, presentations etc that could contain sensitive information.", "rationale": "Disable external sharing of Sway documents that can contain sensitive information to prevent accidental or arbitrary data leak.", "impact": "Interactive reports, presentations, newsletters and other items created in Sway will not be shared outside the organization by users.", "remediation": { "text": "###### To ensure Sways cannot be viewed outside of your organization use the Microsoft 365 Admin Center\r\n\t\t\t\t\t1. Expand \u0060Settings\u0060 then select \u0060Org settings\u0060.\r\n\t\t\t\t\t2. Under Services select \u0060Sway\u0060.\r\n\t\t\t\t\t3. Under \u0060Sharing\u0060 uncheck the following:\r\n\t\t\t\t\t3.1 Let people in your organization share their sways with people outside your organization\r\n\t\t\t\t\t4. Click \u0060Save\u0060", "code": { "powerShell": null, "iac": null, "terraform": null, "other": null } }, "recommendation": null, "references": [ "https://support.microsoft.com/en-us/office/administrator-settings-for-sway-d298e79b-b6ab-44c6-9239-aa312f5784d4" ], "compliance": [ { "name": "CIS Microsoft 365 Foundations Benchmark", "version": "7.0.0", "reference": "1.3.8", "profile": [ "E3 Level 2", "E5 Level 2" ] } ], "level": "medium", "tags": [], "rule": { "path": null, "subPath": null, "selectCondition": {}, "query": [], "shouldExist": null, "returnObject": null, "removeIfNotExists": null }, "output": { "html": { "data": { "properties": {}, "expandObject": null }, "table": null, "decorate": [], "emphasis": [], "actions": { "objectData": { "properties": [ "*" ], "expandObject": null, "limit": null }, "showGoToButton": false, "showModalButton": false, "directLink": null } }, "text": { "data": { "properties": {}, "expandObject": null }, "status": { "keyName": [], "message": "Ensure that Sways cannot be shared with people outside of your organization", "defaultMessage": "Ensure that Sways cannot be shared with people outside of your organization" }, "properties": { "resourceName": null, "resourceId": null, "resourceType": null }, "onlyStatus": false } }, "idSuffix": "m365_sway_external_sharing_enabled", "notes": [], "categories": [], "immutableProperties": [], "id": "microsoft365_2164" } |