Cloud & SaaS · M365 · v0.1.0 · draft
Microsoft 365 tenant
Secure configuration baseline for Microsoft 365 tenants (Entra ID, Exchange Online, SharePoint, OneDrive, Teams).
Current state of the main branch, drafts included. Not released yet.
01
Controls
No control yet. Controls are written from primary sources by contributors, see how to contribute.
02
Profiles
- Baseline
baseline - Settings every tenant should apply. Low operational impact. 0 controls.
- Hardened
hardened - Stronger settings for sensitive environments. May require user communication or licenses. Extends
baseline: applies every one of its controls too. 0 controls.
03
Domains
- Identity & authentication
CB-M365-AUTH-NNN - 0 controls.
- Applications & consent
CB-M365-APPS-NNN - 0 controls.
- Privileged access & administration
CB-M365-ADMIN-NNN - 0 controls.
- Exchange Online & mail flow
CB-M365-MAIL-NNN - 0 controls.
- SharePoint, OneDrive & Teams
CB-M365-COLLAB-NNN - 0 controls.
- Data protection
CB-M365-DATA-NNN - 0 controls.
- Logging & monitoring
CB-M365-AUDIT-NNN - 0 controls.
04
Versions
A release is the git tag m365/v<version>: a zip with the controls, their translations, bundle.json and index.json.
05
Written from
- Microsoft Entra ID documentation Microsoft, vendor-doc
- Microsoft Graph API reference Microsoft, vendor-doc
- Exchange Online documentation Microsoft, vendor-doc
Maintained by Alice. Content under CC BY 4.0, _standard.yml.