Description:
Verifies that SharePoint and OneDrive external sharing is limited to an explicit allowlist of approved partner domains, rather than permitting sharing with any external domain.
Why:
External sharing is restricted to a non-empty allowlist of approved domains, reducing the surface area for accidental or malicious data exposure to untrusted external parties.
Configured: External sharing is restricted by domain allowlist.
Not Configured: External sharing is not restricted by domain allowlist.
Scoring: Contributes up to 1 point to the Posture Recommendations score.
Category: General
Microsoft Licensing: Works with Basic licensing
Secure Score Impact: YES — Microsoft publishes the improvement action "Ensure SharePoint external sharing is managed through domain allowlists/blocklists".
Remediation in Augmentt: Configure directly in Augmentt (Configure tab)
Compliance Frameworks:
CIS Microsoft 365 Benchmark v6 (Level 2) — 7.2.6
CIS Microsoft 365 Benchmark v7 (Level 2) — 7.2.6
CIS Controls v8 — 3.3
CIS Controls v8.1 — 3.3
Microsoft documentation: