Description:
Verifies that Customer Lockbox is enabled, so tenant administrators must approve Microsoft support engineer access to customer content and that approval is audited.
Why:
CIS M365 Foundations Benchmark v6 §1.3.6 (L2) requires Customer Lockbox to be enabled so tenant administrators must approve Microsoft support engineer access to customer content and the approval is audited.
Configured: Customer Lockbox is enabled.
Not Configured: Customer Lockbox is disabled.
Scoring: Contributes up to 1 point to the Posture Recommendations score.
Category: General
Microsoft Licensing: Requires M365 E5
Secure Score Impact: Not verified. No Microsoft Secure Score control could be confirmed for this setting from published sources. See the note in README.md before publishing this field.
Remediation in Augmentt: Configure directly in Augmentt (Configure tab)
Compliance Frameworks:
CIS Microsoft 365 Benchmark v6 (Level 2) — 1.3.6
CIS Microsoft 365 Benchmark v7 (Level 2) — 1.3.6
Microsoft documentation: