Ensure Source Code Management (SCM) email notifications are restricted to verified domains

ÉlevéeNiveau 1Revue manuellesupply-chain

Description

Restrict the organization’s Source Code Management (SCM) email notifications to approved domains only. Restricting Source Code Management email notifications to verified domains only prevents data leaks, as personal emails and custom domains are more prone to account takeover via DNS hijacking or password breach. Note Only members with approved email would be able to receive Source Code Management notifications.

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

Ensure Source Code Management email notifications are restricted to approved domains only.

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Restrict Source Code Management email notifications to approved domains only.

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: devsecopssupply-chain
Référence: CIS Software Supply Chain Security Guide Benchmark v1.0.0 - 1.3.10 Ensure Source Code Management (SCM) email notifications are restricted to verified domains