MS.SHAREPOINT.3.3v1 - Reauthentication days for people who use a verification code SHALL be set to 30 days or less.

Information

A verification code may be given out to provide access to information for a short period of time. By setting expiration timers for verification code access, administrators prevent unintended sustained access to information.

Solution

1. Sign in to the SharePoint admin center.

2. Select Policies \> Sharing.

3. Expand More external sharing settings.

4. Select People who use a verification code must reauthenticate after this many days.

5. Enter 30 days or less.

6. Select Save.

See Also

https://github.com/cisagov/ScubaGear/tree/v1.5.0/

Item Details

Category: ACCESS CONTROL, SECURITY ASSESSMENT AND AUTHORIZATION, CONFIGURATION MANAGEMENT, CONTINGENCY PLANNING, SYSTEM AND COMMUNICATIONS PROTECTION, SYSTEM AND INFORMATION INTEGRITY

References: 800-53|AC-3, 800-53|AC-16, 800-53|AC-17, 800-53|AC-18, 800-53|AC-19, 800-53|AC-20, 800-53|CA-7, 800-53|CM-2, 800-53|CM-6, 800-53|CM-7, 800-53|CM-8, 800-53|CP-6, 800-53|CP-7, 800-53|CP-9, 800-53|CP-10, 800-53|SC-4, 800-53|SC-7, 800-53|SC-28, 800-53|SC-36, 800-53|SI-3, 800-53|SI-4, 800-53|SI-7, 800-53|SI-10, 800-53|SI-12, 800-53|SI-16

Plugin: microsoft_azure

Control ID: 99e6fb9a9120cedced3e4bfb44e16bdf4f5758bcecfbbbdf25ef7390e700d9c9