Benjamin Metz
🏢 oediv🇩🇪 Bielefeld, Germany
Tests authored
- CIS.M365.1.3.4(L1) Ensure 'User owned apps and services' is restricted
- CIS.M365.1.3.5(L1) Ensure internal phishing protection for Forms is enabled
- CIS.M365.1.3.7(L2) Ensure 'third-party storage services' are restricted in 'Microsoft 365 on the web'
- CIS.M365.4.1(L1) Ensure devices without a compliance policy are marked 'not compliant'
- CIS.M365.5.1.2.2(L1) Ensure users cannot register applications
- CIS.M365.5.1.2.3(L1) Ensure 'Restrict non-admin users from creating tenants' is set to 'Yes'
- CIS.M365.5.1.5.1(L2) Ensure user consent to apps accessing company data on their behalf is not allowed
- CIS.M365.5.1.5.2(L1) Ensure the admin consent workflow is enabled
- CIS.M365.5.1.6.2(L1) Ensure that guest user access is restricted
- CIS.M365.5.2.3.5(L1) Ensure weak authentication methods are disabled