Description:

Verifies that calendar details are not shared with all domains.

Why:

Calendar details may contain information that should not be shared by default with all domains. Disabling sharing with all domains closes an avenue for data exfiltration while still allowing for legitimate use as needed.

Configured: Calendar details are not shared with all domains.

Not Configured: Calendar details are shared with all domains.

Scoring: Contributes up to 1 point to the Posture Recommendations score.

Category: Exchange

Microsoft Licensing: Works with Basic licensing

Secure Score Impact: YES — Microsoft Secure Score control exo_individualsharing.

Remediation in Augmentt: Configure directly in Augmentt (Configure tab); Guided remediation steps (Instructions tab)

Compliance Frameworks:

  • CISA SCuBA — MS.EXO.6.2

  • CIS Microsoft 365 Benchmark v6 (Level 1) — 1.3.1

  • CIS Microsoft 365 Benchmark v7 (Level 1) — 1.3.1

Microsoft documentation: