SharePoint
14 checks from CIS Microsoft 365 Foundations Benchmark, CISA SCuBA baselines: 1 High, 13 Medium.
| ID | Title | Severity | Suite |
|---|---|---|---|
| CIS.M365.7.2.2 | Ensure SharePoint and OneDrive integration with Azure AD B2B is enabled (not run by Mito) | Medium | CIS Microsoft 365 Foundations Benchmark |
| CIS.M365.7.2.5 | Ensure that SharePoint guest users cannot share items they don’t own (not run by Mito) | Medium | CIS Microsoft 365 Foundations Benchmark |
| CIS.M365.7.2.7 | Ensure link sharing is restricted in SharePoint and OneDrive (not run by Mito) | Medium | CIS Microsoft 365 Foundations Benchmark |
| CIS.M365.7.2.9 | Ensure guest access to a site or OneDrive will expire automatically (not run by Mito) | Medium | CIS Microsoft 365 Foundations Benchmark |
| CIS.M365.7.2.11 | Ensure the SharePoint default sharing link permission is set (not run by Mito) | Medium | CIS Microsoft 365 Foundations Benchmark |
| CIS.M365.7.3.1 | Ensure Office 365 SharePoint infected files are disallowed for download (not run by Mito) | Medium | CIS Microsoft 365 Foundations Benchmark |
| CISA.MS.SHAREPOINT.1.1 | External sharing for SharePoint SHALL be limited to Existing guests or Only People in your organization. (not run by Mito) | Medium | CISA SCuBA baselines |
| CISA.MS.SHAREPOINT.1.2 | External sharing for OneDrive SHALL be limited to Existing guests or Only People in your organization. (not run by Mito) | Medium | CISA SCuBA baselines |
| CISA.MS.SHAREPOINT.1.3 | External sharing SHALL be restricted to approved external domains and/or users in approved security groups per interagency collaboration needs. (not run by Mito) | High | CISA SCuBA baselines |
| CISA.MS.SHAREPOINT.2.1 | File and folder default sharing scope SHALL be set to Specific People. (not run by Mito) | Medium | CISA SCuBA baselines |
| CISA.MS.SHAREPOINT.2.2 | File and folder default sharing permissions SHALL be set to View only. (not run by Mito) | Medium | CISA SCuBA baselines |
| CISA.MS.SHAREPOINT.3.1 | Expiration days for Anyone links SHALL be set to 30 days or less. (not run by Mito) | Medium | CISA SCuBA baselines |
| CISA.MS.SHAREPOINT.3.2 | Allowable file and folder permissions for Anyone links SHALL be set to View only. (not run by Mito) | Medium | CISA SCuBA baselines |
| CISA.MS.SHAREPOINT.3.3 | Reauthentication days for people who use a verification code SHALL be set to 30 days or less. (not run by Mito) | Medium | CISA SCuBA baselines |
Open-source licences. CIS Benchmark material © Center for Internet Security, Inc.; CISA SCuBA baselines are public domain (CC0).
© 2026 Virtual Petals. Mito is a Virtual Petals service, hosted in Microsoft Azure UAE North.