Home
Security Hardening
CIS Microsoft SharePoint 2016 OS V1.1.0

CIS Microsoft SharePoint 2016 OS V1.1.0

Ensure SharePoint implements an information system isolation boundary that minimizes the number of non-security functions.
Details Review the SharePoint server configuration to ensure an information system isolation boundary that minimizes the number of non-security functions...
Ensure SharePoint implements security functions as a layered structure minimizing interactions between layers of the design.
Details SharePoint must implement security functions as a layered structure minimizing interactions between layers of the design and avoiding any...
Ensure SharePoint is configured with HTTPS connections
Details By default, communication between Web servers and service applications within a farm takes place by using HTTP with a...
Ensure SharePoint provides the ability to prohibit the transfer of unsanctioned information in accordance with security policy.
Details SharePoint must provide the ability to prohibit the transfer of unsanctioned information in accordance with security policy. Rationale: The...
Ensure specific whitelisted IP addresses, IP address ranges, and/or domains are set
Details Access to the SharePoint web application should be restricted to a certain group of users. Typically, this is done...
Ensure that auditable events and diagnostic tracking settings within SharePoint is consistent with the organization’s security plans
Details SharePoint must allow designated organizational personnel to select which auditable events are to be audited by specific components of...
Ensure that On-Premise SharePoint servers is configured without OneDrive redirection linkages.
Details Disable OneDrive Redirection for On-Premise SharePoint servers Rationale: OneDrive Redirection allows users and organizations to redirect their SharePoint sites...
Ensure that remote sessions for accessing security functions and security-relevant information are audited
Details Remote access to SharePoint security functions (e.g., user management, audit log management, etc.) and security relevant information requires the...
Ensure that SharePoint application servers are protected by a reverse proxy
Details A reverse proxy is server component that sits between the internet and the web servers. It accepts HTTP requests,...
Ensure that SharePoint is configured with ‘Strict’ browser file handling settings
Details SharePoint must prevent the execution of prohibited mobile code. Rationale: Decisions regarding the utilization of mobile code within organizational...

Prev Next

CIS Microsoft SharePoint 2016 OS V1.1.0

Ensure SharePoint implements an information system isolation boundary that minimizes the number of non-security functions.

Ensure SharePoint implements security functions as a layered structure minimizing interactions between layers of the design.

Ensure SharePoint is configured with HTTPS connections

Ensure SharePoint provides the ability to prohibit the transfer of unsanctioned information in accordance with security policy.

Ensure specific whitelisted IP addresses, IP address ranges, and/or domains are set

Ensure that auditable events and diagnostic tracking settings within SharePoint is consistent with the organization’s security plans

Ensure that On-Premise SharePoint servers is configured without OneDrive redirection linkages.

Ensure that remote sessions for accessing security functions and security-relevant information are audited

Ensure that SharePoint application servers are protected by a reverse proxy

Ensure that SharePoint is configured with ‘Strict’ browser file handling settings