• Type: CUSTOMER
• Severity: WARNING
• Protection against: HACKING
• CIS: -
• Fix Available: YES

This Customer Check verifies if the Microsoft Security Defaults setting is enabled.

Why this check?

The Security Defaults is a set of settings offered by Microsoft to optimize protection against common attacks. The aim of this setting is to ensure that all organizations have a basic level of security without additional costs.

For organizations with licensing models from E3 and above, we recommend - in line with CIS Benchmark - to disable security defaults again, as more advanced options become available that further enhance identity protection.

What are the possible outcomes of the check?

This check has two possible outcomes. In Attic, this is reflected as follows:

• Okay: Security Defaults are set according to advice.
• Warning: Security Defaults deviate from advice.

How should this be followed up?

If the output is Warning , we advise adjusting the settings to best practices.

A Fix is available for this check, which we will offer through Attic.

More information about Security Defaults: Azure Active Directory security defaults | Security Defaults