Energy
GOV-11Low

Disable Self-Service Sign-Up for Energy & Utilities

How energy & utilities organizations should implement GOV-11 for Microsoft 365 security and compliance.

Energy & Utilities organizations face unique security challenges when managing Microsoft 365 environments. The GOV-11 control (Disable Self-Service Sign-Up) is particularly important for this sector due to nist-800-53 and cis requirements.

Why Energy & Utilities Organizations Need This Control

Energy & Utilities organizations face specific regulatory requirements including nist-800-53, cis, iso27001. The GOV-11 control helps address these requirements by:

  • External users cannot join the organization via self-service sign-up
  • authorizationPolicy.allowEmailVerifiedUsersToJoinOrganization is false
  • authorizationPolicy.allowedToSignUpEmailBasedSubscriptions is false

Self-service sign-up lets external users join the tenant on their own, creating ungoverned external identities without admin oversight. Disabling it ensures every external identity enters through a controlled, reviewable path.

Industry-Specific Considerations

When implementing GOV-11 in a energy & utilities environment, consider:

  • **Regulatory requirements**: nist-800-53, cis, iso27001 may mandate specific configurations
  • **Risk tolerance**: Energy & Utilities organizations typically have moderate to low risk tolerance
  • **Audit frequency**: Plan for regular compliance reviews
  • **Documentation**: Maintain detailed records for regulatory inspections

Implementation Steps

To implement GOV-11 in your Microsoft 365 environment:

  • External users cannot join the organization via self-service sign-up
  • authorizationPolicy.allowEmailVerifiedUsersToJoinOrganization is false
  • authorizationPolicy.allowedToSignUpEmailBasedSubscriptions is false

This control requires manual implementation through the Entra admin center.

Energy Compliance Requirements

Energy organizations must comply with these frameworks, all of which address disable self-service sign-up:

Why This Control Matters for Energy

Self-service sign-up lets external users join the tenant on their own, creating ungoverned external identities without admin oversight. Disabling it ensures every external identity enters through a controlled, reviewable path.

Common threats in energy & utilities:

  • Nation-state attacks on infrastructure
  • Ransomware targeting OT systems
  • Insider threats in control rooms

For energy & utilities organizations, GOV-11 is a key component of a compliant Microsoft 365 security posture. TrueConfig helps you implement and maintain this control while meeting industry-specific requirements.

Ready to secure your energy Microsoft 365 environment?

TrueConfig continuously monitors your tenant against energy best practices, including this control and 6+ others.