Description:
When auditing in the Microsoft Purview compliance portal is turned on, user and admin activity from your organization is recorded in the audit log and retained for 90 days, and up to one year depending on the license assigned to users.
Why:
When auditing in the Microsoft Purview compliance portal is turned on, user and admin activity from your organization is recorded in the audit log and retained for 90 days, and up to one year depending on the license assigned to users.
Configured: Feature is in place.
Not Configured: Feature is not in place.
Scoring: Contributes up to 1 point to the Posture Recommendations score.
Category: General
Microsoft Licensing: Works with Basic licensing
Secure Score Impact: YES — Microsoft Secure Score control mip_search_auditlog.
Remediation in Augmentt: Configure directly in Augmentt (Configure tab)
Compliance Frameworks:
CISA SCuBA — MS.DEFENDER.6.1
Essential Eight (Maturity Level 2) — 1683, 1509, 1650
Essential Eight (Maturity Level 3) — 1683, 1509, 1650
NIST CSF 2.0 — PR.PS-04
CIS Microsoft 365 Benchmark v6 (Level 1) — 3.1.1
CIS Microsoft 365 Benchmark v7 (Level 1) — 3.1.1
HIPAA Security Rule — 164.312(b), 164.308(a)(1)(ii)(D)
CMMC Level 2 — AU.L2-3.3.1, AU.L2-3.3.2
Microsoft documentation: