rules/rulesets/cis_m365_4.0.json

{
    "about": "This ruleset contains a collection of rules for Microsoft 365 based on CIS benchmark. These rules perform static analysis on Microsoft 365 artifacts within Exchange Online, SharePoint Online, Microsoft Teams or OneDrive, among others, and are used as a mechanism to evaluate the configuration of these Microsoft 365 workloads. Rules are also divided into categories and subcategories according to the rule's type. These rules are designed to determine whether controls within a standard are being adhered to. This will ensures that Microsoft 365 tenant will meet the industry standards.",
    "framework": {
        "name" : "CIS Microsoft 365 Foundations",
        "version" : "4.0.0"
    },
    "rules": {
        "entra-id-missing-cloud-only-administrative-account.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "1.1.1"
                    }
                ]
            }
        ],
        "eid-emergency-accounts.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "1.1.2"
                    }
                ]
            }
        ],
        "eid-iam-excessive-global-admins.json": [
            {
                "args": [
                    "4"
                ],
                "enabled": true,
                "level": "high",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "1.1.3"
                    }
                ]
            }
        ],
        "entra-iam-privileged-users-use-licenses-with-reduced-application-footprint.json": [
            {
                "args": [
                    "aad-privileged-roles.json"
                ],
                "enabled": true,
                "level": "low",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "1.1.4"
                    }
                ]
            }
        ],
        "eid-public-group-detected.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "1.2.1"
                    }
                ]
            }
        ],
        "exo-sign-in-shared-mailbox-enabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "1.2.2"
                    }
                ]
            }
        ],
        "eid-password-expiring-enabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "1.3.1"
                    }
                ]
            }
        ],
        "entra-idle-session-exists.json": [
            {
                "enabled": true,
                "level": "low",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "1.3.2"
                    }
                ]
            }
        ],
        "exchange-calendar-sharing-external-user-enabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "1.3.3"
                    }
                ]
            }
        ],
        "m365-user-owned-apps-and-services-allowed.json": [
            {
                "enabled": true,
                "level": "low",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "1.3.4"
                    }
                ]
            }
        ],
        "forms-internal-phishing-protection-disabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "1.3.5"
                    }
                ]
            }
        ],
        "exchange-customer-lockout-feature-enabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "1.3.6"
                    }
                ]
            }
        ],
        "third-party-storage-allowed-microsoft365.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "1.3.7"
                    }
                ]
            }
        ],
        "sway-external-sharing-enabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "1.3.8"
                    }
                ]
            }
        ],
        "exchange-atp-safe-links-office365-apps-disabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "2.1.1"
                    }
                ]
            }
        ],
        "exchange-common-attachment-type-filter-enabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "2.1.2"
                    }
                ]
            }
        ],
        "exchange-notifications-for-internal-users-sending-malware-disabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "2.1.3"
                    }
                ]
            }
        ],
        "exchange-atp-safe-attachments-policy-disabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "2.1.4"
                    }
                ]
            }
        ],
        "exchange-atp-safe-attachments-for-sharepoint-onedrive-and-teams-disabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "2.1.5"
                    }
                ]
            }
        ],
        "exchange-spam-policies-notify-admin-disabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "2.1.6"
                    }
                ]
            }
        ],
        "exchange-anti-phishing-policy-disabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "2.1.7"
                    }
                ]
            }
        ],
        "exchange-spf-records-are-published-for-all-exchange-domains.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "2.1.8"
                    }
                ]
            }
        ],
        "exchange-dkim-disabled-for-domain.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "2.1.9"
                    }
                ]
            }
        ],
        "exchange-missing-dmarc-records.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "2.1.10"
                    }
                ]
            }
        ],
        "exchange-lack-of-comprehensive-attachment-filtering.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "2.1.11"
                    }
                ]
            }
        ],
        "exchange-connection-filter-ip-allow-list-enabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "2.1.12"
                    }
                ]
            }
        ],
        "exchange-connection-filter-safe-list-enabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "2.1.13"
                    }
                ]
            }
        ],
        "exhange-inbound-anti-spam-policies-allowed-domains.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "2.1.14"
                    }
                ]
            }
        ],
        "exchange-priority-account-protection-not-enabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "2.4.1"
                    }
                ]
            }
        ],
        "exchange-priority-accounts-lacks-strict-protection.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "2.4.2"
                    }
                ]
            }
        ],
        "exchange-defender-for-cloud-apps-not-enabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "2.4.3"
                    }
                ]
            }
        ],
        "exchange-zero-hour-auto-purge-for-teams-disabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "2.4.4"
                    }
                ]
            }
        ],
        "purview-audit-log-search-disabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "3.1.1"
                    }
                ]
            }
        ],
        "purview-dlp-policies-disabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "3.2.1"
                    }
                ]
            }
        ],
        "purview-dlp-policies-Teams-disabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "3.2.2"
                    }
                ]
            }
        ],
        "purview-sharepoint-online-lack-of-information-protection-policies.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "3.3.1"
                    }
                ]
            }
        ],
        "entra-security-defaults-disabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.1.1.1"
                    }
                ]
            }
        ],
        "eid-per-user-mfa-disabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.1.2.1"
                    }
                ]
            }
        ],
        "eid-users-can-register-apps-enabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.1.2.2"
                    }
                ]
            }
        ],
        "eid-non-admin-users-allowedto-create-tenants.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.1.2.3"
                    }
                ]
            }
        ],
        "eid-restrict-users-entra-portal.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.1.2.4"
                    }
                ]
            }
        ],
        "eid-stay-signed-policy-disabled.json": [
            {
                "enabled": true,
                "level": "low",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.1.2.5"
                    }
                ]
            }
        ],
        "eid-linkedin-sync-enabled.json": [
            {
                "enabled": true,
                "level": "low",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.1.2.6"
                    }
                ]
            }
        ],
        "eid-dynamic-group-for-guest-users-not-present.json": [
            {
                "enabled": true,
                "level": "low",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.1.3.1"
                    }
                ]
            }
        ],
        "eid-users-can-consent-apps-data-access.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.1.5.1"
                    }
                ]
            }
        ],
        "eid-admin-consent-workflow-not-enabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.1.5.2"
                    }
                ]
            }
        ],
        "eid-restrict-collaboration-specific-domains-disabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.1.6.1"
                    }
                ]
            }
        ],
        "eid-guest-object-restriction-disabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.1.6.2"
                    }
                ]
            }
        ],
        "eid-guest-invite-restriction-disabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.1.6.3"
                    }
                ]
            }
        ],
        "eid-password-hash-sync-disabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.1.8.1"
                    }
                ]
            }
        ],
        "entra-iam-privileged-users-disabled-mfa.json": [
            {
                "args": [
                    "aad-m365-privileged-roles.json"
                ],
                "enabled": true,
                "level": "high",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.2.2.1"
                    }
                ]
            }
        ],
        "entra-iam-users-disabled-mfa.json": [
            {
                "enabled": true,
                "level": "high",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.2.2.2"
                    }
                ]
            }
        ],
        "eid-cap-block-legacy-authentication-not-enabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.2.2.3"
                    }
                ]
            }
        ],
        "eid-cap-lack-sign-in-frequency-browser-persistent-session.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.2.2.4"
                    }
                ]
            }
        ],
        "eid-ensure-phishing-resistant-mfa-for-high-privileged-users-missing-cap.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.2.2.5"
                    }
                ]
            }
        ],
        "eid-cap-user-risk-policy-require-password-change.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.2.2.6"
                    }
                ]
            }
        ],
        "eid-cap-sign-in-risk-policy-require-mfa.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.2.2.7"
                    }
                ]
            }
        ],
        "eid-cap-admin-center-limited-high-privileged-users.json": [
            {
                "args": [
                    "aad-m365-privileged-roles.json"
                ],
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.2.2.8"
                    }
                ]
            }
        ],
        "eid-cap-block-sign-in-risk-not-enabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.2.2.9"
                    }
                ]
            }
        ],
        "eid-require-device-compliant-all-apps-missing-cap.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.2.2.10"
                    }
                ]
            }
        ],
        "eid-require-device-compliant-all-apps-missing-cap.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.2.2.10"
                    }
                ]
            }
        ],
        "eid-require-device-compliant-to-register-security-info-missing-cap.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.2.2.11"
                    }
                ]
            }
        ],
        "eid-microsoft-authenticator-lack-mfa-fatigue-protection.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.2.3.1"
                    }
                ]
            }
        ],
        "eid-custom-banned-password-list-disabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.2.3.2"
                    }
                ]
            }
        ],
        "eid-password-protection-on-prem-not-enabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.2.3.3"
                    }
                ]
            }
        ],
        "eid-users-mfa-capable-not-enabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.2.3.4"
                    }
                ]
            }
        ],
        "eid-weak-authentication-methods-enabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.2.3.5"
                    }
                ]
            }
        ],
        "eid-sspr-enabled-set-to-all.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.2.4.1"
                    }
                ]
            }
        ],
        "eid-pim-is-used-to-manage-roles.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.3.1"
                    }
                ]
            }
        ],
        "eid-access-reviews-for-guest-users-are-configured.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.3.2"
                    }
                ]
            }
        ],
        "eid-high-privileged-roles-access-reviews-not-configured.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.3.3"
                    }
                ]
            }
        ],
        "eid-approval-not-required-for-global-admin-role-activation.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "5.3.4"
                    }
                ]
            }
        ],
        "exchange-audit-enabled-globally.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "6.1.1"
                    }
                ]
            }
        ],
        "exchange-mailbox-auditing-e3-enabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "6.1.2"
                    }
                ]
            }
        ],
        "exchange-mailbox-auditing-e5-enabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "6.1.3"
                    }
                ]
            }
        ],
        "exchange-audit-bypass-enabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "6.1.4"
                    }
                ]
            }
        ],
        "exchange-mail-forwarding-blocked-and-disabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "6.2.1"
                    }
                ]
            }
        ],
        "exchange-transport-rules-domain-whitelisted.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "6.2.2"
                    }
                ]
            }
        ],
        "exchange-external-email-sender-configured.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "6.2.3"
                    }
                ]
            }
        ],
        "exchange-users-installing-outlook-add-ins-allowed.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "6.3.1"
                    }
                ]
            }
        ],
        "exchange-modern-authentication-disabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "6.5.1"
                    }
                ]
            }
        ],
        "exchange-mailtips-disabled.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "6.5.2"
                    }
                ]
            }
        ],
        "exchange-owa-external-storage-allowed.json": [
            {
                "enabled": true,
                "level": "low",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "6.5.3"
                    }
                ]
            }
        ],
        "exchange-smtp-auth-enabled.json": [
            {
                "enabled": true,
                "level": "low",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "6.5.4"
                    }
                ]
            }
        ],
        "sharepoint-modern-authentication-required.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "7.2.1"
                    }
                ]
            }
        ],
        "sharepoint-b2b-integration-disabled.json": [
            {
                "enabled": true,
                "level": "low",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "7.2.2"
                    }
                ]
            }
        ],
        "sharepoint-external-content-sharing-not-restricted.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "7.2.3"
                    }
                ]
            }
        ],
        "sharepoint-onedrive-external-content-sharing-not-restricted.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "7.2.4"
                    }
                ]
            }
        ],
        "sharepoint-guest-user-sharing-disabled.json": [
            {
                "enabled": true,
                "level": "info",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "7.2.5"
                    }
                ]
            }
        ],
        "sharepoint-external-sharing-managed-allow-deny-domain-list.json": [
            {
                "enabled": true,
                "level": "info",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "7.2.6"
                    }
                ]
            }
        ],
        "sharepoint-link-sharing-not-restricted.json": [
            {
                "enabled": true,
                "level": "info",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "7.2.7"
                    }
                ]
            }
        ],
        "sharepoint-external-sharing-not-restricted-by-security-group.json": [
            {
                "enabled": true,
                "level": "info",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "7.2.8"
                    }
                ]
            }
        ],
        "sharepoint-guest-access-to-site-or-onedrive-not-expire.json": [
            {
                "enabled": true,
                "level": "info",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "7.2.9"
                    }
                ]
            }
        ],
        "sharepoint-reauthentication-with-verification-code-disabled.json": [
            {
                "enabled": true,
                "level": "info",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "7.2.10"
                    }
                ]
            }
        ],
        "sharepoint-link-sharing-permission-not-set.json": [
            {
                "enabled": true,
                "level": "info",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "7.2.11"
                    }
                ]
            }
        ],
        "sharepoint-microsoft365-infected-files-disallowed-to-download-not-enabled.json": [
            {
                "enabled": true,
                "level": "info",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "7.3.1"
                    }
                ]
            }
        ],
        "sharepoint-onedrive-sync-restricted-for-unmanaged-devices.json": [
            {
                "enabled": true,
                "level": "info",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "7.3.2"
                    }
                ]
            }
        ],
        "sharepoint-custom-script-execution-personal-sites-disabled.json": [
            {
                "enabled": true,
                "level": "info",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "7.3.3"
                    }
                ]
            }
        ],
        "sharepoint-custom-script-execution-enabled-on-site-collections.json": [
            {
                "enabled": true,
                "level": "info",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "7.3.4"
                    }
                ]
            }
        ],
        "teams-external-file-sharing-enabled-only-for-approved-cloud-storage-services.json": [
            {
                "enabled": true,
                "level": "info",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "8.1.1"
                    }
                ]
            }
        ],
        "teams-disable-users-sent-emails-to-channel-email-address.json": [
            {
                "enabled": true,
                "level": "info",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "8.1.2"
                    }
                ]
            }
        ],
        "teams-external-domains-not-restricted.json": [
            {
                "enabled": true,
                "level": "info",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "8.2.1"
                    }
                ]
            }
        ],
        "teams-external-access-not-restricted.json": [
            {
                "enabled": true,
                "level": "info",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "8.2.2"
                    }
                ]
            }
        ],
        "teams-external-users-can-initiate-conversations.json": [
            {
                "enabled": true,
                "level": "info",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "8.2.3"
                    }
                ]
            }
        ],
        "teams-communication-with-skype-users-enabled.json": [
            {
                "enabled": true,
                "level": "info",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "8.2.4"
                    }
                ]
            }
        ],
        "teams-app-permission-policies-not-configured.json": [
            {
                "enabled": true,
                "level": "info",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "8.4.1"
                    }
                ]
            }
        ],
        "teams-anonymous-users-cant-join-meeting.json": [
            {
                "enabled": true,
                "level": "info",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "8.5.1"
                    }
                ]
            }
        ],
        "teams-anonymous-users-and-dial-in-callers-not-restricted-start-meeting.json": [
            {
                "enabled": true,
                "level": "info",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "8.5.2"
                    }
                ]
            }
        ],
        "teams-only-org-people-can-bypass-lobby.json": [
            {
                "enabled": true,
                "level": "info",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "8.5.3"
                    }
                ]
            }
        ],
        "teams-users-dialing-in-cant-bypass-lobby.json": [
            {
                "enabled": true,
                "level": "info",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "8.5.4"
                    }
                ]
            }
        ],
        "teams-meeting-chat-not-allow-anonymous-users.json": [
            {
                "enabled": true,
                "level": "info",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "8.5.5"
                    }
                ]
            }
        ],
        "teams-only-organizers-and-co-organizers-can-present.json": [
            {
                "enabled": true,
                "level": "info",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "8.5.6"
                    }
                ]
            }
        ],
        "teams-external-participants-cannot-give-or-request-control.json": [
            {
                "enabled": true,
                "level": "info",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "8.5.7"
                    }
                ]
            }
        ],
        "teams-external-meeting-chat-is-off.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "8.5.8"
                    }
                ]
            }
        ],
        "teams-meeting-recording-enabled.json": [
            {
                "enabled": true,
                "level": "low",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "8.5.9"
                    }
                ]
            }
        ],
        "teams-users-can-report-security-concerns-not-configured.json": [
            {
                "enabled": true,
                "level": "info",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "8.6.1"
                    }
                ]
            }
        ],
        "fabric-guest-user-access-not-restricted.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "9.1.1"
                    }
                ]
            }
        ],
        "fabric-external-user-invitations-not-restricted.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "9.1.2"
                    }
                ]
            }
        ],
        "fabric-guest-access-to-content-not-restricted.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "9.1.3"
                    }
                ]
            }
        ],
        "fabric-publish-to-web-not-restricted.json": [
            {
                "enabled": true,
                "level": "medium",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "9.1.4"
                    }
                ]
            }
        ],
        "fabric-interact-with-r-and-python-not-disabled.json": [
            {
                "enabled": true,
                "level": "low",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "9.1.5"
                    }
                ]
            }
        ],
        "fabric-allow-users-apply-sensitivity-labels-not-enabled.json": [
            {
                "enabled": true,
                "level": "low",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "9.1.6"
                    }
                ]
            }
        ],
        "fabric-shareable-links-not-restricted.json": [
            {
                "enabled": true,
                "level": "low",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "9.1.7"
                    }
                ]
            }
        ],
        "fabric-enabling-external-data-sharing-not-restricted.json": [
            {
                "enabled": true,
                "level": "low",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "9.1.8"
                    }
                ]
            }
        ],
        "fabric-block-resourcekey-authentication-not-enabled.json": [
            {
                "enabled": true,
                "level": "low",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "9.1.9"
                    }
                ]
            }
        ],
        "fabric-access-to-api-by-service-principal-not-restricted.json": [
            {
                "enabled": true,
                "level": "low",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "9.1.10"
                    }
                ]
            }
        ],
        "fabric-service-principals-can-create-and-use-profiles.json": [
            {
                "enabled": true,
                "level": "low",
                "compliance": [
                    {
                        "name": "CIS Microsoft 365 Foundations",
                        "version": "4.0.0",
                        "reference": "9.1.11"
                    }
                ]
            }
        ]
    }
}