CISA.MS.EXO.8.3 - The selected DLP solution SHOULD offer services comparable to the native DLP solution offered by Microsoft.
Overview
The selected DLP solution SHOULD offer services comparable to the native DLP solution offered by Microsoft.
Rationale: Any alternative DLP solution should be able to detect sensitive information in Exchange Online and block access to unauthorized entities.
This test will always skip by default.
Related links
- Purview admin center - Data loss prevention policies
- CISA 8 Data Loss Prevention Solutions - MS.EXO.8.3
- CISA ScubaGear Rego Reference
Test Metadata
| Field | Value |
|---|---|
| Test ID | CISA.MS.EXO.8.3 |
| Severity | Medium |
| Suite | CISA |
| Category | exchange |
| PowerShell test | Test-MtCisaDlpAlternate |
| Tags | CISA, CISA.MS.EXO.8.3, MS.EXO, MS.EXO.8.3 |
Source
- Pester test:
tests/cisa/exchange/Test-MtCisaDlpAlternate.Tests.ps1 - PowerShell source:
powershell/public/cisa/exchange/Test-MtCisaDlpAlternate.ps1