CISA.MS.SHAREPOINT.1.2 - External sharing for OneDrive SHALL be limited to Existing guests or Only People in your organization.

Contributed by -MynsterAll contributors →

Overview

External sharing for OneDrive SHALL be limited to Existing guests or Only People in your organization.

Rationale: Restricting OneDrive sharing reduces the risk of unauthorized data exposure from individual user storage. Allowing broad external sharing of OneDrive content increases the attack surface.

Remediation action:

1. Sign in to the SharePoint admin center.
2. Select Policies > Sharing.
3. Adjust external sharing slider for OneDrive to Existing guests or Only people in your organization.
4. Select Save.

Related links

• CISA 1 OneDrive Sharing - MS.SHAREPOINT.1.2v1
• CISA ScubaGear Rego Reference

Test Metadata

Field	Value
Test ID	CISA.MS.SHAREPOINT.1.2
Severity	Unknown
Suite	CISA
Category	spo
PowerShell test	Test-MtCisaSpoOneDriveSharing
Tags	CISA, CISA.MS.SHAREPOINT.1.2, MS.SHAREPOINT, MS.SHAREPOINT.1.2

Source

• Pester test: tests/cisa/spo/Test-MtCisaSpoOneDriveSharing.Tests.ps1
• PowerShell source: powershell/public/cisa/spo/Test-MtCisaSpoOneDriveSharing.ps1