Description:

Reports on the Microsoft Secure Score improvement action Ensure Safe Attachments policy is enabled, part of Microsoft Defender for Office 365. Microsoft evaluates this control across your tenant's policies and Augmentt surfaces the result alongside your other posture checks.

Why:

The Safe Attachments policy helps protect users from malware in email attachments by scanning attachments for viruses, malware, and other malicious content. When an email attachment is received by a user, Safe Attachments will scan the attachment in a secure environment and provide a verdict on whether the attachment is safe or not.

Configured: 100% of users are affected by policies that are configured securely

Not Configured: One or more applicable policies are not configured securely.

Scoring: Contributes up to 1 point to the Posture Recommendations score.

Category: Exchange

Microsoft Licensing: M365 Defender

Secure Score Impact: YES — Microsoft Secure Score control mdo_safeattachmentpolicy.

Remediation in Augmentt: Microsoft Defender portal

Compliance Frameworks:

  • CISA SCuBA — MS.EXO.10.1

  • NIST CSF 2.0 — DE.CM-09

  • CIS Microsoft 365 Benchmark v5 — 2.1.4

  • CIS Microsoft 365 Benchmark v6 (Level 2) — 2.1.4

  • CIS Microsoft 365 Benchmark v7 (Level 2) — 2.1.4

  • CIS Controls v8 — 9.7

  • CIS Controls v8.1 — 9.7

  • CIS Controls v7 — 7.10, 8.1

  • HIPAA Security Rule — 164.308(a)(5)(ii)(B)

Microsoft documentation: