CISA.MS.EXO.8.3: The selected DLP solution SHOULD offer services comparable to the native DLP solution offered by Microsoft.
| ID | CISA.MS.EXO.8.3 |
| Severity | Medium |
| Suite | CISA SCuBA baselines |
| Product | Exchange Online |
| Related products | Purview |
| Feature | Data loss prevention |
| Security area | Data protection |
| Resource type | Tenant |
| User impact of fixing | Medium |
| Effort to fix | Medium |
| Benchmark | CISA SCuBA Secure Configuration Baselines for Microsoft 365 ScubaGear main, 2026-10-11, MS.EXO.8.3 (SHOULD) |
| Framework controls | cisa-scuba:MS.EXO.8.3 |
| MITRE ATT&CK | T1213, T1530, T1567 |
| Reads from | Exchange Online, Microsoft Graph, Security & Compliance PowerShell |
What this checks and how to fix it
Section titled “What this checks and how to fix it”The selected DLP solution SHOULD offer services comparable to the native DLP solution offered by Microsoft.
Rationale: Any alternative DLP solution should be able to detect sensitive information in Exchange Online and block access to unauthorized entities.
This test will always skip by default.
Related links
Section titled “Related links”- Purview admin center - Data loss prevention policies
- CISA 8 Data Loss Prevention Solutions - MS.EXO.8.3
- CISA ScubaGear Rego Reference
Mito check, based on CISA ScubaGear. Author: soulemike. Open-source licences.
Open-source licences. CIS Benchmark material © Center for Internet Security, Inc.; CISA SCuBA baselines are public domain (CC0).
© 2026 Virtual Petals. Mito is a Virtual Petals service, hosted in Microsoft Azure UAE North.