Ensure Source Code Management (SCM) email notifications are restricted to verified domains

AltaNivel 1Revisión manualsupply-chain

Descripción

Restrict the organization’s Source Code Management (SCM) email notifications to approved domains only. Restricting Source Code Management email notifications to verified domains only prevents data leaks, as personal emails and custom domains are more prone to account takeover via DNS hijacking or password breach. Note Only members with approved email would be able to receive Source Code Management notifications.

Cómo se verifica

Método de auditoría: Revisión manual

Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.

Ensure Source Code Management email notifications are restricted to approved domains only.

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Restrict Source Code Management email notifications to approved domains only.

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: devsecopssupply-chain
Referencia: CIS Software Supply Chain Security Guide Benchmark v1.0.0 - 1.3.10 Ensure Source Code Management (SCM) email notifications are restricted to verified domains