Skillplan M365 Checklist
2026-07-20 19:36
M365
Microsoft 365 Security Checklist
de
en
fr
it
System Online
← Back to sections
Mitigation Controls · Section 8 of 17
SharePoint Online & OneDrive
Assessment Progress
0
/ 136 items
0%
Fulfillment so far
0
/ 0 controls
0%
Explain this control
Set the tenant external sharing slider to 'New and existing guests' (no anonymous by default) for SharePoint and OneDrive.
Not Fulfilled
Fulfilled
Accepted
Limit 'Anyone' anonymous link expiration to 30 days or less and set the default link type to 'Specific people'.
Not Fulfilled
Fulfilled
Accepted
Require sign-in for guest access; disallow shared links that bypass authentication.
Not Fulfilled
Fulfilled
Accepted
Configure idle session timeout (90 minutes) on unmanaged devices for SharePoint and OneDrive.
Not Fulfilled
Fulfilled
Accepted
Restrict OneDrive sync to managed devices only via the SharePoint admin policy.
Not Fulfilled
Fulfilled
Accepted
Disable end-user site creation; centralize site provisioning through IT or a governed self-service workflow.
Not Fulfilled
Fulfilled
Accepted
Apply tenant-wide DLP policies covering credit cards, national IDs, and customer-PII patterns.
Not Fulfilled
Fulfilled
Accepted
Block external sharing of items labeled with the highest-sensitivity label via auto-labeling rules.
Not Fulfilled
Fulfilled
Accepted
Save and Continue →
