Archives

Risk Rating: Low

Box-Collaborator permission on Folders

The control report provides the list of Collaborators having permission on Box Folders. Collaborators access should be tightly controlled.  The report will be sent to...

Certification progress history

This is an operational control to monitor the access review process. A progress snapshot for each certification should be available in terms of status of...

Certifications with errors

This is an operational control to monitor the access review process. All errors in a certification such as ‘invalid certifier’ or certifier with ‘null email...

Document Libraries on Site

The report provides lists of all document libraries in a SharePoint Site  .The report will be sent to IT security admin and managers to review...

Documents In Sites

The report provides the lists all the SharePoint documents in Sites.  The report will be sent to IT security admin and managers to review and...

Documents with versions

The report provides a summary of all document with versioning enabled.  Versioning is useful to determine when changes have been made and for document restoration. ...

FSO’s of Site Collection

The control reports the list of users and groups assigned with Functional Site Owner (FSO) permission for SharePoint Site Collection.  The report will be sent...

Groups with no users

The control report provides a list of all the accounts that do not have SalesForce Groups associated. These groups are typically considered less active. Managers...

Invalid FSO for Site Collection

The report provides list of all the inactive accounts with functional site owner (FSO) permission assigned for site collection.  The report will be sent to...

Libraries with Inheritance Break

The control report lists the SharePoint Document Library for which permission inheritance from Parent is Broken and unique permission has been set.  The report will...

List of classic VMs

Detects classic VMs. Classic VM or Virtual Machines (Classic) is the old way of deploying VMs.   Azure is pushing towards the new way of deploying...

List of Items on SubSite

The report provides information regarding all items on SharePoint SubSite . The report will be sent to IT security admin and managers to review and...

LoadBalancer default Limit Reached

Detects subscriptions which have reached default Load Balancer limits.  It is recommended to monitor load balancers limit on an ongoing basis for a subscription

O365 License Utilization

The control provides information on Utilization of O365 Licenses, which contains details about Licenses Available and Licenses Assigned in the form of a report.  This...

O365 Services utilization

The report provides the list Utilization of all the O365 Services.  The report is provided to the administrator and manager to review and make changes...

One Drives with Sensitive Files

The report provides the list of One Drives that contains Sensitive Files.  The report will be sent to IT security admin and managers on ongoing...

Permission Set Usage

The control reports provides permission set usage. Managers and/or IT Admins should review permission set usage periodically and remove unnecessary permission sets. This will assist...

Profile Usage

The control reports provides profile usage. Managers and/or IT Admins should review profile usage periodically and remove unnecessary profiles. This will assist effective License Utilization

Records on SiteCollection

The report provides the list of Summary of Records residing on Site Collection.  The report will be sent to IT security admin and managers on...

Records on SubSites

The report provides the list of Summary of records residing on SubSites.  The report will be sent to IT security admin and managers on ongoing...

SharePoint External users list

The report provides the list of External Users in a SharePoint Site Collection.  The report will be sent to IT security admin and managers on...

SharePoint files with guest link

The report detects the Files in SharePoint for which Guest Link with View or Edit Permission has been enabled.  SharePoint Files allows collaboration by Sharing...

Site Collection without PSO

The report provides list of Site Collection without PSO SharePoint Group.  The report will be sent to IT security admin and managers to review and...

Sites with Orphaned External Users

The report provides the Lists orphaned external users (no Identity in Saviynt) having access to SharePoint Sites.  The report will be sent to IT security...

Storage Account Metrics

With metrics on Azure Storage, you can analyze usage trends, trace requests, and diagnose issues with your storage account

Top 5 Sensitive Documents

The report will provide visibility into the top 5 sensitive documents in SharePoint to allow managers and IT security admins to take necessary actions on...

Total Accounts in Office365

The report provides the number of accounts.  The report will be sent to IT security admin and managers on ongoing basis to review and make...

Total Inactive accounts

The control detects all inactive accounts and provide report to IT security admin and manager who can remove the accounts if not required.

Total Orphan Accounts in O365

The report detects all Orphan Accounts and provide visibility to IT security administrator and manager who can review the report and remove the accounts.

Total Records

The report provides the total number of records.  The report will be sent to IT security admin and managers on ongoing basis to review and...

Total SharePoint Files

The report provides the number of SharePoint Files.  The report will be sent to IT security admin and managers on ongoing basis to review and...

Total SharePoint Groups

The control detects number of all the SharePoint Groups and provide report to IT security admin and manager who can remove the accounts if not...

Total SharePoint Lists

The report provides the number of SharePoint Lists.  The report will be sent to IT security admin and managers on ongoing basis to review and...

Total SharePoint Site Collection

The report provides the number of SharePoint Collections.  The report will be sent to IT security admin and managers on ongoing basis to review and...

Total SharePoint Sites

The report provides the list of SharePoint Sites.  The report will be sent to IT security admin and managers on ongoing basis to review and...

Unrestricted Documents

The report provides list of documents which are classified as Unrestricted.  The report will be sent to IT security admin and managers to review and...

Unused Disks

When a VM is deleted, the OS and data disks associated with the VM are not deleted, and often are left over in the Azure...

Unused Network Security Groups

Control reports that provide visibility into Network Security Groups that are unused.  It is recommended to associate network security groups to at least one of...

Unused Public IP Addresses

Detects Public IP Addresses that are not used with any resource. It is recommended to either remove the unused public IP addresses or assign them...

Unused Teams

The report detects the list of unused teams in GitHub.  These teams are considered to be less active.  IT security administrators and managers will review...

Users with View All Data Permissions

The control reports lists all accounts with View all Data Permissions. Access to view sensitive data could violate various compliance initiatives. Accounts with access to...

Workloads without Resource Locks

Control reports that provide visibility into Azure VMs which do not have any resource locks associated.  It is recommended to add resource delete lock to...