SharePoint Online & OneDrive · Microsoft 365 Security Checkliste

Skillplan M365 Checklist

2026-07-20 00:25

Bewertungsfortschritt 0 / 136 Elemente 0%

Bisherige Erfüllung 0 / 0 Kontrollen 0%

Set the tenant external sharing slider to 'New and existing guests' (no anonymous by default) for SharePoint and OneDrive.

Limit 'Anyone' anonymous link expiration to 30 days or less and set the default link type to 'Specific people'.

Require sign-in for guest access; disallow shared links that bypass authentication.

Configure idle session timeout (90 minutes) on unmanaged devices for SharePoint and OneDrive.

Restrict OneDrive sync to managed devices only via the SharePoint admin policy.

Disable end-user site creation; centralize site provisioning through IT or a governed self-service workflow.

Apply tenant-wide DLP policies covering credit cards, national IDs, and customer-PII patterns.

Block external sharing of items labeled with the highest-sensitivity label via auto-labeling rules.