Securing SharePoint 2019

Question

I saw the information at below links and followed suggestions in them.

https://learn.microsoft.com/en-us/sharepoint/security-for-sharepoint-server/security-hardening

https://www.cisecurity.org/benchmark/microsoft_sharepoint/

https://cipherpoint.com/blog/sharepoint-security-hardening/

https://www.itprotoday.com/conferencing/sharepoint-security-server-hardening

https://sharegate.com/blog/10-ways-make-sharepoint-secure

1. How do I check if a SharePoint 2019 site collection is secure? Are there any other hardening guide/checklist I can use?
2. How do I check if a SharePoint online site collection is secure? Are there any other hardening guide/checklist I can use?

Thanks

Answer 1

Hi @Steve ,

As Trevor said, SharePoint security involves many aspects, such as authentication, sharing, permission etc.

For SharePoint server security issues, please refer to the option: Security for SharePoint Server:

https://learn.microsoft.com/en-us/sharepoint/security-for-sharepoint-server/security-for-sharepoint-server

For SharePoint online security issues, please refer to the following catalogs under the "Security and Compliance" option:

https://learn.microsoft.com/en-us/sharepoint/deploy-file-collaboration

More information:

https://sharepointmaven.com/how-to-set-security-for-a-sharepoint-site/

---

If an Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

Your question is too generic. Can you please narrow down what you're asking? At the Site Collection level, SharePoint only performs AuthZ (authorization), i.e. do you have permission to reach the site. AuthN (authentication) is performed by IIS if using Windows auth on-prem. If using SAML/other form, it is performed by that provider, i.e. in SPO it is performed by Azure AD.

Remember that security is not a product, it is a process. It always changes.