Disable Self-Service Sign-Up for Financial Services & Banking
How financial services & banking organizations should implement GOV-11 for Microsoft 365 security and compliance.
Financial Services & Banking organizations face unique security challenges when managing Microsoft 365 environments. The GOV-11 control (Disable Self-Service Sign-Up) is particularly important for this sector due to soc2 and pci-dss requirements.
Why Financial Services & Banking Organizations Need This Control
Financial Services & Banking organizations face specific regulatory requirements including soc2, pci-dss, nist-800-53, iso27001. The GOV-11 control helps address these requirements by:
- External users cannot join the organization via self-service sign-up
- authorizationPolicy.allowEmailVerifiedUsersToJoinOrganization is false
- authorizationPolicy.allowedToSignUpEmailBasedSubscriptions is false
Self-service sign-up lets external users join the tenant on their own, creating ungoverned external identities without admin oversight. Disabling it ensures every external identity enters through a controlled, reviewable path.
Industry-Specific Considerations
When implementing GOV-11 in a financial services & banking environment, consider:
- **Regulatory requirements**: soc2, pci-dss, nist-800-53 may mandate specific configurations
- **Risk tolerance**: Financial Services & Banking organizations typically have moderate to low risk tolerance
- **Audit frequency**: Plan for regular compliance reviews
- **Documentation**: Maintain detailed records for regulatory inspections
Implementation Steps
To implement GOV-11 in your Microsoft 365 environment:
- External users cannot join the organization via self-service sign-up
- authorizationPolicy.allowEmailVerifiedUsersToJoinOrganization is false
- authorizationPolicy.allowedToSignUpEmailBasedSubscriptions is false
TrueConfig monitors this control and alerts you to deviations.
Financial Services Compliance Requirements
Financial Services organizations must comply with these frameworks, all of which address disable self-service sign-up:
Why This Control Matters for Financial Services
Self-service sign-up lets external users join the tenant on their own, creating ungoverned external identities without admin oversight. Disabling it ensures every external identity enters through a controlled, reviewable path.
Common threats in financial services & banking:
- • Account takeover attacks
- • Insider trading through unauthorized access
- • Wire fraud via business email compromise
For financial services & banking organizations, GOV-11 is a key component of a compliant Microsoft 365 security posture. TrueConfig helps you implement and maintain this control while meeting industry-specific requirements.
Ready to secure your financial services Microsoft 365 environment?
TrueConfig continuously monitors your tenant against financial services best practices, including this control and 7+ others.