Secure Your Microsoft 365 Environment: A Comprehensive Guide Mapped to CIS Controls
Nick Ross · Updated · Video and write-up
When the Cybersecurity & Infrastructure Security Agency (CISA) released the Secure Cloud Business applications (SCuBA) (opens in new tab) project, I was pretty excited but it left me wanting more. I wanted more enablement materials and a way to map this back to broader cybersecurity frameworks we are adopting vs just having a checklist to follow. For this reason, I’ve been spending time building a lengthy guide expanding off of the project to include security controls across Azure AD, Teams, Exchange, SharePoint, OneDrive, and Intune. Each security control includes the following enablement material:
- Control Summary
- Multi-tenant and Single-Tenant Power BI Templates
- Policy Definition
- Licensing Considerations
- Set up instructions.
- End-User Impact/Notification Templates
- Tips
- PowerShell Scripts
- Video Demonstrations
You can view a sample of the guide here:
CIS Controls Mapping
I mapped all of the security recommendations to the CIS Controls and include more end-user notification templates (48 total).
Power BI Template
Get Premium Guide (opens in new tab)
Let me know what you think of the guide
Overall Rating *Add your review hereName *EmailCompany NameMessageSubmit
Map your Microsoft 365 settings to CIS Controls and NIST CSF in about a minute.
CloudCapsule scans 300+ controls, maps each finding to the framework you report against, and tracks the trend over time, so the evidence for your next review is already there.
No credit card required. Results in about a minute.
Keep reading
Microsoft's NEW Conditional Access Policy Plans Explained
Microsoft just introduced Conditional Access Policy Plans, a new feature in Microsoft Entra, now in preview, that changes how we organize and manage Conditional Access policies.
Microsoft 365 Passkeys Not Working? 6 Common Problems and How to Fix Them
Passkey registration failing in Microsoft 365? Here are six common problems, from missing registration options to Conditional Access loops and lost phones, and how to troubleshoot and fix each one.
ConnectWise / SkyKick Breach: How to Secure Third-Party Applications in Microsoft 365
The ConnectWise Cloud Backup (formerly SkyKick) incident showed how a compromised vendor app can reach Microsoft 365 tenants without passwords or MFA. Here are 4 steps to lock down third-party applications.