> For the complete documentation index, see [llms.txt](https://docs.tminus365.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.tminus365.com/security/exchange.md).

# Exchange

![](/files/jwvQ0k0lGmAXCRszdpso)

**Section Purpose:** The security section shows recommend security controls for Teams based on the CIS Controls. Each control contains the following subsections:

* Description
* Policy Definition
* Licensing Considerations 
* Set Up Instructions
* End-User Impact
* PowerShell Scripts
* Video Tutorials

| Policy                                                                                                                                                                                                     | End-User Impact                                                   | License                                                         |
| ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------- | --------------------------------------------------------------- |
| [Automatic Forwarding to External Domains SHALL Be Disabled](/security/exchange/automatic-forwarding-to-external-domains-shall-be-disabled.md)                                                             | <mark style="background-color:green;">Low</mark>                  | Standard                                                        |
| [Sender Policy Framework SHALL Be Enabled](/security/exchange/sender-policy-framework-shall-be-enabled.md)                                                                                                 | <mark style="background-color:green;">Low</mark>                  | Standard                                                        |
| [DomainKeys Identified Mail SHOULD Be Enabled](/security/exchange/domainkeys-identified-mail-should-be-enabled.md)                                                                                         | <mark style="background-color:green;">Low</mark>                  | Standard                                                        |
| [Domain-Based Message Authentication, Reporting, and Conformance SHALL Be Enabled](/security/exchange/domain-based-message-authentication-reporting-and-conformance-shall-be-enabled.md)                   | <mark style="background-color:green;">Low</mark>                  | Standard                                                        |
|                                                                                                                                                                                                            |                                                                   |                                                                 |
| [Enable Email Encryption](/security/exchange/enable-email-encryption.md)                                                                                                                                   | <mark style="background-color:green;">Low</mark>                  | Azure Information Protection Plan 1/Business Premium/Enterprise |
| [Simple Mail Transfer Protocol Authentication SHALL Be Disabled](/security/exchange/simple-mail-transfer-protocol-authentication-shall-be-disabled.md)                                                     | <mark style="background-color:green;">Low</mark>                  | Standard                                                        |
| [Calendar and Contact Sharing SHALL Be Restricted](/security/exchange/calendar-and-contact-sharing-shall-be-restricted.md)                                                                                 | <mark style="background-color:green;">Low</mark>                  | Standard                                                        |
| [External Sender Warnings SHALL Be Implemented](/security/exchange/external-sender-warnings-shall-be-implemented.md)                                                                                       | <mark style="background-color:green;">Low</mark>                  | Standard                                                        |
| [Data Loss Prevention Solutions SHALL Be Enabled](/security/exchange/data-loss-prevention-solutions-shall-be-enabled.md)                                                                                   | <mark style="color:yellow;background-color:yellow;">Medium</mark> | Business Premium/Enterprise                                     |
| [Emails SHALL Be Filtered by Attachment File Type](/security/exchange/emails-shall-be-filtered-by-attachment-file-type.md)                                                                                 | <mark style="background-color:green;">Low</mark>                  | Defender for Office 365                                         |
| [Zero-Hour Auto Purge for Malware SHOULD Be Enabled](/security/exchange/zero-hour-auto-purge-for-malware-should-be-enabled.md)                                                                             | <mark style="background-color:green;">Low</mark>                  | Standard                                                        |
| [Phishing Protections SHOULD Be Enabled](/security/exchange/phishing-protections-should-be-enabled.md)                                                                                                     | <mark style="color:yellow;background-color:yellow;">Medium</mark> | Defender for Office 365                                         |
| [Inbound Anti-Spam Protections SHALL Be Enabled](/security/exchange/inbound-anti-spam-protections-shall-be-enabled.md)                                                                                     | <mark style="color:yellow;background-color:yellow;">Medium</mark> | Standard                                                        |
| [Safe Link Policies SHOULD Be Enabled](/security/exchange/safe-link-policies-should-be-enabled.md)                                                                                                         | <mark style="color:yellow;background-color:yellow;">Medium</mark> | Defender for Office 365                                         |
| [Safe Attachments SHALL Be Enabled](/security/exchange/safe-attachments-shall-be-enabled.md)                                                                                                               | <mark style="color:yellow;background-color:yellow;">Medium</mark> | Defender for Office 365                                         |
| [IP Allow Lists SHOULD NOT be Implemented](/security/exchange/ip-allow-lists-should-not-be-implemented.md)                                                                                                 | <mark style="background-color:green;">Low</mark>                  | Standard                                                        |
| [Mailbox Auditing SHALL Be Enabled](/security/exchange/mailbox-auditing-shall-be-enabled.md)                                                                                                               | <mark style="background-color:green;">None</mark>                 | Standard                                                        |
| [Alerts SHALL Be Enabled](/security/exchange/alerts-shall-be-enabled.md)                                                                                                                                   | <mark style="background-color:green;">None</mark>                 | Defender for Office 365                                         |
| [Audit Logging SHALL Be Enabled](/security/exchange/audit-logging-shall-be-enabled.md)                                                                                                                     | <mark style="background-color:green;">None</mark>                 | Standard                                                        |
| [Enhanced Filtering Shall be configured if a 3rd party email filtering tool is being used](/security/exchange/enhanced-filtering-shall-be-configured-if-a-3rd-party-email-filtering-tool-is-being-used.md) | <mark style="background-color:green;">Low</mark>                  | Standard                                                        |