Office 365 Security Checklist

• Site conducted

  Select

• Document Number

• Date and Time of Inspection

  Date

• Ticket Number

• Company

• Site Address

• Wycom Resource

  Select Brianna Graham Troy Graham Test User Test User 2

  • Brianna Graham
  • Troy Graham
  • Test User
  • Test User 2

ACCOUNT / AUTHENTICATION POLICIES

• 

• Is multi factor authentication (MFA) enabled for all users in administrative roles?

  Yes

  No

  N/A

• Is multi factor authentication enabled for all users in all roles?

  Yes

  No

  N/A

• How many global admins are designated to the Office 365 Tenant?

• Is self-service password reset enabled?

  Yes

  No

  N/A

• Is modern authentication enabled for Exchange Online, Sharepoint Applications and Microsoft Teams?

  Yes

  No

  N/A

• Are Office 365 Passwords set to expire ?

  Yes

  No

  N/A

APPLICATION PERMISSIONS

• 

• Are third-party integrated application registrations allowed in user settings?

  Yes

  No

  N/A

• Is calendar details sharing with external users enabled or disabled?

  Enabled

  Disabled

• Is Advanced Threat Protection enabled for Office Applications?

  Yes

  No

  N/A

• Is Advanced Threat Protection for Sharepoint, OneDrive and Microsoft Teams Enabled or Disabled?

  Enabled

  Disabled

DATA MANAGEMENT

• 

• Is customer lock box feature enabled?

  Yes

  No

  N/A

• SharePoint Online data classification policies are set up and used?

  Yes

  No

  N/A

• external domains are not allowed in Skype or Teams?

  Yes

  No

  N/A

• DLP policies are enabled?

  Yes

  No

  N/A

• External users cannot share files, folders, and sites they do not own?

  Yes

  No

  N/A

• External file sharing in Teams is enabled for only approved cloud storage services?

  Yes

  No

  N/A

EMAIL SECURITY / EXCHANGE ONLINE

• 

• Common Attachment Types Filter is enabled?

  Yes

  No

  N/A

• Exchange Online Spam Policies are enabled and set correctly?

  Yes

  No

  N/A

• Mail transport rules do not forward email to external domains?

  Yes

  No

  N/A

• Mail transport rules do not whitelist specific domains?

  Yes

  No

  N/A

• Client Rules Forwarding Block is enabled?

  Yes

  No

  N/A

• Advanced Threat Protection Safe Links policy is enabled?

  Yes

  No

  N/A

• Advanced Threat Protection Safe Attachments policy is enabled?

  Yes

  No

  N/A

• Basic authentication for Exchange Online is disabled?

  Yes

  No

  N/A

• Anti-phishing policy has been created?

  Yes

  No

  N/A

• DKIM is enabled for all Exchange Online Domains?

  Yes

  No

  N/A

• SPF records are published for all Exchange Domains?

  Yes

  No

  N/A

• DMARC Records for all Exchange Online domains are published?

  Yes

  No

  N/A

• Notifications for internal users sending malware is Enabled

  Yes

  No

  N/A

AUDITING POLICIES

• 

• Microsoft 365 audit log search is Enabled?

  Yes

  No

  N/A

• Mailbox auditing for all users is Enabled?

  Yes

  No

  N/A

• Azure AD ‘Risky sign-ins’ report is reviewed at least weekl?

  Yes

  No

  N/A

• Application Usage report is reviewed at least weekly?

  Yes

  No

  N/A

• Self-service password reset activity report is reviewed at least weekly?

  Yes

  No

  N/A

• User role group changes are reviewed at least weekly?

  Yes

  No

  N/A

• Mail forwarding rules are reviewed at least weekly?

  Yes

  No

  N/A

• Mailbox Access by Non-Owners Report is reviewed at least biweekly?

  Yes

  No

  N/A

• Malware Detection's report is reviewed at least weekly?

  Yes

  No

  N/A

• Account Provisioning Activity report is reviewed at least weekly?

  Yes

  No

  N/A

• Non-global administrator role group assignments are reviewed monthly?

  Yes

  No

  N/A

• Spoofed domains report is review weekly?

  Yes

  No

  N/A

• Microsoft 365 Cloud App Security is Enabled?

  Yes

  No

  N/A

• Report of users who have had their email privileges restricted due to spamming is reviewed?

  Yes

  No

  N/A

STORAGE POLICIES

• 

• Document sharing is being controlled by domains with whitelist or blacklist?

  Yes

  No

  N/A

• Expiration time for external sharing links is set?

  Yes

  No

  N/A

MOBILE DEVICE MANAGEMENT

• 

• Mobile device management polices are set to require advanced security configurations to protect from basic internet attacks?

  Yes

  No

  N/A

• Mobile device password reuse is prohibited?

  Yes

  No

  N/A

• Mobile devices are set to never expire password?

  Yes

  No

  N/A

• Users cannot connect from devices that are jail broken or rooted?

  Yes

  No

  N/A

• Mobile devices are set to wipe on multiple sign-in failures to prevent brute force compromise?

  Yes

  No

  N/A

• Settings are enabled to lock multiple devices after a period of inactivity to prevent unauthorised access?

  Yes

  No

  N/A

• Mobile device encryption is enabled to prevent unauthorised access to mobile data?

  Yes

  No

  N/A

• Mobile devices require complex passwords to prevent brute force attacks?

  Yes

  No

  N/A

• Devices connecting have AV and a local firewall enabled (Windows 10)?

  Yes

  No

  N/A

• Mobile device management policies are required for email profiles?

  Yes

  No

  N/A

• Mobile devices require the use of a password / passcode?

  Yes

  No

  N/A

COMPLETION

• 

• Overall Recommendations

• Nettko Resource l (Name and Signature)

  Sign