GOV-05: Maintain Group Naming Conventions

GOV-05 is a security control that consistent naming conventions improve governance, make groups easier to find, and indicate their purpose at a glance. random or inconsistent group names suggest poor organizational hygiene and make administration harder. It requires that groups follow a consistent naming convention pattern and at least 70% of groups use a detectable pattern (e.g., prefix-name, prefix_name, camelcase), naming patterns improve group organization and discoverability.

Consistent naming conventions improve governance, make groups easier to find, and indicate their purpose at a glance. Random or inconsistent group names suggest poor organizational hygiene and make administration harder.

GOV-05 requires manual implementation. Manual review and renaming required. Detect existing patterns and encourage consistency.

This control can be implemented with any Microsoft 365 subscription, including free Azure AD.

GOV-05 is included in the TrueConfig Recommended Secure baseline (Level 1). This is the foundation level suitable for most organizations.