Description:
Reports on the Microsoft Secure Score improvement action Create zero-hour auto purge policies for malware, part of Exchange Online Protection. Microsoft evaluates this control across your tenant's policies and Augmentt surfaces the result alongside your other posture checks.
Why:
Zero-hour auto purge (ZAP) quarantines the message that contains malware attachment for both read, as well as unread, messages that are found to contain malware after delivery. Only admins can view and manage messages that have been quarantined.
Configured: 100% of users are affected by policies that are configured securely
Not Configured: One or more applicable policies are not configured securely.
Scoring: Contributes up to 1 point to the Posture Recommendations score.
Category: Exchange
Microsoft Licensing: M365 Defender
Secure Score Impact: YES — Microsoft Secure Score control mdo_zapmalware.
Remediation in Augmentt: Microsoft Defender portal
Compliance Frameworks:
CISA SCuBA — MS.EXO.10.2-3
NIST CSF 2.0 — RS.MI-02
HIPAA Security Rule — 164.308(a)(5)(ii)(B)
CMMC Level 1 — SI.L1-b.1.xiv
CMMC Level 2 — SI.L2-3.14.4
Microsoft documentation: