Microsoft O365 Security Compliance with CIS benchmarks

Question

We would like to perform a security assessment on WFM 0365 suite and we are checking the feasibility to use any Microsoft Office 365 Connector available to perform the assessment against CIS benchmarks.

Does Microsoft 365 already have any features to run checks against CIS benchmarks which we can use. The main intent is to assess our current configuration and ensure we enable available security controls for O365.

Any feedback or suggestions are most welcome!

Thanks.

Answer 1

Microsoft Sells Built-In Compliance Checks as Compliance Manager, Part of their Purview Product Family - If you have an E5 License you are eligible to enable up to three of their Premium Assessments, including several CIS Policies.

These Assessments will evaluate your actual Tenant Configuration and offer Remediation Actions. They will also provide Tasks for the Guidance contained in the Benchmarks that may not be associated with a configuration but are instead concerned with organizational Readiness.