Description:
Verifies if a Conditional Access Policy is in place that blocks access based on Countries.
Make sure your Named Locations is set with Location Type: Country (IP).
Why:
Having a risky country conditional access policy defined reduces the number of attacks users are exposed to. This can be done through requiring additional steps to grant access from certain countries or blocking access completely.
Configured: Policy is in place.
Not Configured: Policy is not in place.
Scoring: Contributes up to 1 point to the Posture Recommendations score.
Category: Identity
Microsoft Licensing: Requires Premium (P1) licensing
Remediation in Augmentt: Guided remediation steps (Instructions tab); Conditional Access Policy manager
Compliance Frameworks:
CIS Microsoft 365 Benchmark v7 (Level 1) — 5.2.2.15
CMMC Level 2 — AC.L2-3.1.12, SI.L2-3.14.7
Microsoft documentation: