Skip to content

Add CIS tests#1432

Open
oed-metzb wants to merge 20 commits intomaester365:mainfrom
oed-metzb:main
Open

Add CIS tests#1432
oed-metzb wants to merge 20 commits intomaester365:mainfrom
oed-metzb:main

Conversation

@oed-metzb
Copy link
Contributor

Description

This PR adds the following tests:

Category Test Description
CIS 1.3.4 Ensure 'User owned apps and services' is restricted
CIS 1.3.5 Ensure internal phishing protection for Forms is enabled
CIS 1.3.7 Ensure 'third-party storage services' are restricted in 'Microsoft 365 on the web'
CIS 4.1 Ensure devices without a compliance policy are marked 'not compliant'
CIS 5.1.2.2 Ensure third party integrated applications are not allowed
CIS 5.1.2.3 Ensure 'Restrict non-admin users from creating tenants' is set to 'Yes'
CIS 5.1.3.1 Ensure a dynamic group for guest users is created
CIS 5.1.5.1 Ensure user consent to apps accessing company data on their behalf is not allowed
CIS 5.1.5.2 Ensure the admin consent workflow is enabled
CIS 5.1.6.2 Ensure that guest user access is restricted
CIS 5.2.3.5 Ensure weak authentication methods are disabled

Contribution Checklist

Before submitting this PR, please confirm you have completed the following:

  • 📖 Read the guidelines for contributing to this repository.
  • 🧪 Ensure the build and unit tests pass by running /powershell/tests/pester.ps1 on your local system.

@oed-metzb oed-metzb requested a review from a team as a code owner February 6, 2026 08:57
}

$scopes = (Get-MgContext).Scopes
$permissionMissing = "OrgSettings-Forms.Read.All" -notin $scopes
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should this permission be added to Get-MtGraphScope ?

}

$scopes = (Get-MgContext).Scopes
$permissionMissing = "OrgSettings-AppsAndServices.Read.All" -notin $scopes
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Should this permission be added to Get-MtGraphScope ?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant