EXT-06: External Sharing Visibility
Frequently asked questions about implementing and managing the EXT-06 security control in Microsoft 365 and Entra ID.
QWhat is EXT-06 (External Sharing Visibility)?▼
EXT-06 is a security control that external sharing is the most common data leakage vector. without visibility into what is shared externally, you cannot assess your data exposure risk or detect sensitive data being shared inappropriately. It requires that external sharing links in sharepoint/onedrive are tracked and anonymous "anyone with the link" shares are identified, external sharing activity is reviewed regularly.
QWhy is External Sharing Visibility important for Microsoft 365 security?▼
External sharing is the most common data leakage vector. Without visibility into what is shared externally, you cannot assess your data exposure risk or detect sensitive data being shared inappropriately.
QHow do I implement EXT-06 in my tenant?▼
EXT-06 requires manual implementation. Requires SharePoint admin access or audit log analysis
QWhat license do I need for EXT-06?▼
This control can be implemented with any Microsoft 365 subscription, including free Azure AD.
QWhich security baseline includes EXT-06?▼
EXT-06 is included in the TrueConfig Recommended Secure baseline (Level 1). This is the foundation level suitable for most organizations.
5
Questions
1
Related Controls
—
Categorized
Related Resources
Still have questions?
Our security experts are here to help. Start a free trial and get personalized guidance for your Microsoft 365 environment.
Start Free Trial