Exchange

Section Purpose: The security section shows recommend security controls for Teams based on the CIS Controls. Each control contains the following subsections:

• Description

• Policy Definition

• Licensing Considerations

• Set Up Instructions

• End-User Impact

• PowerShell Scripts

• Video Tutorials

Policy	End-User Impact	License
Automatic Forwarding to External Domains SHALL Be Disabled	Low	Standard
Sender Policy Framework SHALL Be Enabled	Low	Standard
DomainKeys Identified Mail SHOULD Be Enabled	Low	Standard
Domain-Based Message Authentication, Reporting, and Conformance SHALL Be Enabled	Low	Standard
Enable Email Encryption	Low	Azure Information Protection Plan 1/Business Premium/Enterprise
Simple Mail Transfer Protocol Authentication SHALL Be Disabled	Low	Standard
Calendar and Contact Sharing SHALL Be Restricted	Low	Standard
External Sender Warnings SHALL Be Implemented	Low	Standard
Data Loss Prevention Solutions SHALL Be Enabled	Medium	Business Premium/Enterprise
Emails SHALL Be Filtered by Attachment File Type	Low	Defender for Office 365
Zero-Hour Auto Purge for Malware SHOULD Be Enabled	Low	Standard
Phishing Protections SHOULD Be Enabled	Medium	Defender for Office 365
Inbound Anti-Spam Protections SHALL Be Enabled	Medium	Standard
Safe Link Policies SHOULD Be Enabled	Medium	Defender for Office 365
Safe Attachments SHALL Be Enabled	Medium	Defender for Office 365
IP Allow Lists SHOULD NOT be Implemented	Low	Standard
Mailbox Auditing SHALL Be Enabled	None	Standard
Alerts SHALL Be Enabled	None	Defender for Office 365
Audit Logging SHALL Be Enabled	None	Standard
Enhanced Filtering Shall be configured if a 3rd party email filtering tool is being used	Low	Standard