网络安全 GRC 15 项
Microsoft 365 Security Baseline Review
此检查清单为英文版。
Assesses a Microsoft 365 tenant against security baseline recommendations covering identity, email, collaboration, data protection, and auditing.
CIS Microsoft 365 BenchmarkNIST 800-53Microsoft SLA
免费 PDF 或 Word · 输入邮箱即可下载。
Identity & Access
- Is MFA enforced for all users, including administrators, via Conditional Access? *
- Is legacy authentication (basic auth, POP/IMAP) blocked tenant-wide? *
- Are privileged roles managed with Entra Privileged Identity Management (PIM) and just-in-time activation? *
- Is Security Defaults or an equivalent Conditional Access policy set enabled? *
Email Security (Exchange Online)
- Are SPF, DKIM, and DMARC configured and enforced for all sending domains? *
- Is Microsoft Defender for Office 365 Safe Links and Safe Attachments enabled? *
- Are external sender warnings and anti-phishing impersonation policies configured? *
- Is auto-forwarding of email to external domains disabled? *
Collaboration & Data Protection
- Are external sharing settings for SharePoint and OneDrive restricted to the minimum required? *
- Are sensitivity labels and DLP policies applied to protect confidential data?
- Are guest access and Teams external federation controls reviewed and restricted? *
Auditing & Monitoring
- Is unified audit logging enabled tenant-wide? *
- Are alerts configured for risky sign-ins and admin activity? *
- Is Microsoft Secure Score reviewed periodically with improvement actions tracked?
- Are audit logs exported to a SIEM for long-term retention and correlation?
下载完整的Microsoft 365 Security Baseline Review检查清单
免费获取排版清晰、便于打印的 PDF，或可编辑的 Word 文档。