Microsoft 365
TMA-M365-1.3.6
Ensure the customer lockbox feature is enabled
Descripción
Customer Lockbox is a security feature that provides an additional layer of control and transparency to customer data in Microsoft 365. It offers an approval process for Microsoft support personnel to access organization data and creates an audited trail to meet compliance requirements. Enabling this feature protects organizational data against data spillage and exfiltration.
Cómo se verifica
Método de auditoría: Revisión manual
To audit using the UI: 1. Navigate to Microsoft 365 admin center https://admin.microsoft.com. 2. Expand Settings > Org settings. 3. Select Security & privacy tab. 4. Click Customer lockbox. 5. Verify the box labeled Require approval for all data access requests is checked. To audit using PowerShell: 1. Connect to Exchange Online using Connect-ExchangeOnline. 2. Run the following PowerShell command: Get-OrganizationConfig | Select-Object CustomerLockBoxEnabled 3. Verify the value is set to True.
Cómo se corrige
Método de corrección: Guía o parche de infraestructura
To remediate using the UI: 1. Navigate to Microsoft 365 admin center https://admin.microsoft.com. 2. Expand Settings > Org settings. 3. Select Security & privacy tab. 4. Click Customer lockbox. 5. Check the box Require approval for all data access requests. 6. Click Save. To remediate using PowerShell: 1. Connect to Exchange Online using Connect-ExchangeOnline. 2. Run the following PowerShell command: Set-OrganizationConfig -CustomerLockBoxEnabled $true
Propiedades
- Sistemas operativos
- Cualquiera
- Etiquetas
- m365saas
- Referencia
- CIS Microsoft 365 Foundations Benchmark v7.0.0 - 1.3.6 Ensure the customer lockbox feature is enabled