Description:
Verifies that the Mailbox Auditing Default (org level) setting is enabled at the organization.
Why:
Available in the audit are actions performed by mailbox owners, delegates, and admins, and the corresponding mailbox audit records will be available when you search for them in the mailbox audit log.
Configured: Feature is in place.
Not Configured: Feature is not in place.
Scoring: Contributes up to 1 point to the Posture Recommendations score.
Category: General
Microsoft Licensing: Works with Basic licensing
Secure Score Impact: YES — Microsoft publishes the improvement action "Ensure mailbox auditing for all users is enabled".
Remediation in Augmentt: Configure directly in Augmentt (Configure tab)
Compliance Frameworks:
CISA SCuBA — MS.EXO.13.1
NIST CSF 2.0 — PR.PS-04
CIS Microsoft 365 Benchmark v6 (Level 1) — 6.1.2
CIS Microsoft 365 Benchmark v7 (Level 1) — 6.1.2
HIPAA Security Rule — 164.312(b), 164.308(a)(1)(ii)(D)
CMMC Level 2 — AU.L2-3.3.1, AU.L2-3.3.2
Microsoft documentation: