Manufacturing
GOV-11Low

Disable Self-Service Sign-Up for Manufacturing & Industrial

How manufacturing & industrial organizations should implement GOV-11 for Microsoft 365 security and compliance.

Manufacturing & Industrial organizations face unique security challenges when managing Microsoft 365 environments. The GOV-11 control (Disable Self-Service Sign-Up) is particularly important for this sector due to iso27001 and nist-800-53 requirements.

Why Manufacturing & Industrial Organizations Need This Control

Manufacturing & Industrial organizations face specific regulatory requirements including iso27001, nist-800-53, cis. The GOV-11 control helps address these requirements by:

  • External users cannot join the organization via self-service sign-up
  • authorizationPolicy.allowEmailVerifiedUsersToJoinOrganization is false
  • authorizationPolicy.allowedToSignUpEmailBasedSubscriptions is false

Self-service sign-up lets external users join the tenant on their own, creating ungoverned external identities without admin oversight. Disabling it ensures every external identity enters through a controlled, reviewable path.

Industry-Specific Considerations

When implementing GOV-11 in a manufacturing & industrial environment, consider:

  • **Regulatory requirements**: iso27001, nist-800-53, cis may mandate specific configurations
  • **Risk tolerance**: Manufacturing & Industrial organizations typically have moderate to low risk tolerance
  • **Audit frequency**: Plan for regular compliance reviews
  • **Documentation**: Maintain detailed records for regulatory inspections

Implementation Steps

To implement GOV-11 in your Microsoft 365 environment:

  • External users cannot join the organization via self-service sign-up
  • authorizationPolicy.allowEmailVerifiedUsersToJoinOrganization is false
  • authorizationPolicy.allowedToSignUpEmailBasedSubscriptions is false

This control requires manual implementation through the Entra admin center.

Manufacturing Compliance Requirements

Manufacturing organizations must comply with these frameworks, all of which address disable self-service sign-up:

Why This Control Matters for Manufacturing

Self-service sign-up lets external users join the tenant on their own, creating ungoverned external identities without admin oversight. Disabling it ensures every external identity enters through a controlled, reviewable path.

Common threats in manufacturing & industrial:

  • Ransomware targeting production systems
  • IP theft through credential compromise
  • Supply chain infiltration

For manufacturing & industrial organizations, GOV-11 is a key component of a compliant Microsoft 365 security posture. TrueConfig helps you implement and maintain this control while meeting industry-specific requirements.

Ready to secure your manufacturing Microsoft 365 environment?

TrueConfig continuously monitors your tenant against manufacturing best practices, including this control and 6+ others.