Description:
Reports on the Microsoft Secure Score improvement action Turn on Safe Documents for Office Clients, part of Microsoft 365 E5. Microsoft evaluates this control across your tenant's policies and Augmentt surfaces the result alongside your other posture checks.
Why:
Safe Documents uses Microsoft Defender for Endpoint to scan documents and files for malicious content. To keep you protected, Safe Documents sends files to the Defender for Endpoint cloud for analysis. Files sent by Safe Documents are not retained in Defender for Endpoint beyond the time needed for analysis (typically, less than 24 hours).
Configured: 100% of users are affected by policies that are configured securely
Not Configured: One or more applicable policies are not configured securely.
Scoring: Contributes up to 1 point to the Posture Recommendations score.
Category: Exchange
Microsoft Licensing: M365 Defender
Secure Score Impact: YES — Microsoft Secure Score control mdo_safedocuments.
Remediation in Augmentt: Microsoft Defender portal
Compliance Frameworks:
NIST CSF 2.0 — DE.CM-09
CIS Microsoft 365 Benchmark v5 — 2.1.5
CIS Microsoft 365 Benchmark v6 (Level 2) — 2.1.5
CIS Microsoft 365 Benchmark v7 (Level 2) — 2.1.5
CIS Controls v8 — 9.7, 10.1
CIS Controls v8.1 — 9.7, 10.1
CIS Controls v7 — 7.10, 8.1
HIPAA Security Rule — 164.308(a)(5)(ii)(B)
CMMC Level 1 — SI.L1-b.1.xv
CMMC Level 2 — SI.L2-3.14.4, SI.L2-3.14.5
Microsoft documentation: