CIS M365 Benchmark Review - Teams

[schrolla]

💡 Summary

Review latest CIS M365 benchmark version for configuration items related to MS Teams. Develop a list of items that either require further investigation or could be good candidates for integration into existing baselines.

Motivation and context

The baselines are meant to provide a secure configuration for M365 services, including MS Teams. Reviewing and integrating additional secure configuration items that can address gaps helps to support that goal.

Implementation notes

Please provide details for implementation, such as:

• Meet with TCOs and MS Teams SMEs to review benchmark
• Identify list of relevant configuration items for further review
• Filter out those that are N/A, already in the SCBs, or not easily assessed thru automation
• Review remaining items more closely
• Create issues for any analysis or new policy work based on candidates

Acceptance criteria

How do we know when this work is done?

• A list of candidate CIs has been developed by the TCOs and SMEs
• Candidate CIs have been analyzed or issued to review in depth have been created