CISA refines Microsoft 365 configuration baselines for cloud shared services offerings

The Cybersecurity and Infrastructure Security Agency has put the finishing touches on its configuration baselines for Microsoft 365 to be used in shared services for agencies to improve the security of their email and cloud environments.

The latest baselines for CISA’s Secure Cloud Business Applications (SCuBA) project are designed to “provide easily adoptable policy configuration recommendations that complement each agency’s unique requirements and risk tolerance levels,” according to a blog post from CISA’s Michael Duffy and Chad Poland.

CISA...