Description:
Reports on the Microsoft Secure Score improvement action Ensure Exchange Online Spam Policies are set to notify administrators, part of Exchange Online Protection. Microsoft evaluates this control across your tenant's policies and Augmentt surfaces the result alongside your other posture checks.
Why:
In Microsoft 365 organizations with mailboxes in Exchange Online or standalone Exchange Online Protection (EOP) organizations without Exchange Online mailboxes, email messages are automatically protected against spam (junk email) by EOP. Configure Exchange Online Spam Policies to copy emails and notify someone when a sender in the organization has been blocked for sending spam emails.
Configured: 100% of users are affected by policies that are configured securely
Not Configured: One or more applicable policies are not configured securely.
Scoring: Contributes up to 1 point to the Posture Recommendations score.
Category: Exchange
Microsoft Licensing: M365 Defender
Secure Score Impact: YES — Microsoft Secure Score control mdo_spam_notifications_only_for_admins.
Remediation in Augmentt: Microsoft Defender portal
Compliance Frameworks:
CIS Microsoft 365 Benchmark v5 — 2.1.6
CIS Microsoft 365 Benchmark v6 (Level 1) — 2.1.6
CIS Microsoft 365 Benchmark v7 (Level 1) — 2.1.6
CIS Controls v8 — 17.5
CIS Controls v8.1 — 17.5
CIS Controls v7 — 7.9, 7.10
Microsoft documentation: