EXT-06HighRecommended Secure

External Sharing Visibility

Guest & External Access control for Microsoft 365 and Entra ID

Why This Control Matters

External sharing is the most common data leakage vector. Without visibility into what is shared externally, you cannot assess your data exposure risk or detect sensitive data being shared inappropriately.

Expected State

When this control is compliant, your tenant should meet these criteria:

  • 1External sharing links in SharePoint/OneDrive are tracked
  • 2Anonymous "Anyone with the link" shares are identified
  • 3External sharing activity is reviewed regularly

Enforcement

Default Mode
Advisory

Alerts on deviations but does not make changes

Auto-Remediation
Manual Only

Requires SharePoint admin access or audit log analysis

Ready to implement this control?

TrueConfig continuously monitors your Microsoft 365 tenant for compliance with this and 50+ other security controls.