cis-azure-foundations-5.2.2
Ensure an exclusionary geographic Conditional Access policy is considered
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Ensure an exclusionary geographic Conditional Access policy is considered
Ensure an exclusionary device code flow policy is considered
Ensure a multifactor authentication policy exists for all users
Ensure multifactor authentication is required for risky sign-ins
Ensure multifactor authentication is required for Windows Azure Service Management API
Ensure multifactor authentication is required to access Microsoft Admin Portals
Ensure 'Owners can manage group membership requests in My Groups' is set to 'No'
Ensure 'Users can create Microsoft 365 groups in Azure portals, API or PowerShell' is set to 'No'
Ensure 'Require Multifactor Authentication to register or join devices with Microsoft Entra' is set to 'Yes'
Ensure no custom subscription administrator roles exist