Microsoft Secure Score – Changes in SSPM support

Microsoft Secure Score is updating its improvement actions to create a more precise representation of security posture. New recommendations will be added to Microsoft Secure Score that will define your score.The updates are expected to roll out by mid-November 2023. The new improvement actions include:

• Ensure 'Phishing-resistant MFA strength' for administrators.
• Use custom banned password lists.
• Ensure Sways cannot be shared with people outside your organization.
• Enable Atlassian mobile app security with MFA, SSO, strong password policies, session timeout for web users, and password expiration policies.
• Use Zendesk authentication, enable session timeouts, block account assumption and bypassing IP restrictions, as well as ensuring sign-in frequency is enabled, and browser sessions are not persistent for administrative users.

To prepare for these changes, Microsoft recommends enabling and adopting two-factor authentication, IP restrictions, and sending notifications on password change for admins, agents, and end-users. There is no need for any other action as your score will be automatically updated accordingly. Microsoft Secure Score will continue to provide recommended security improvement actions in the future, so it's essential to keep reviewing them frequently.

The post Microsoft Secure Score – Changes in SSPM support appeared first on M365 Admin.