Security Posture Management now checks your Microsoft 365 configuration against the latest CIS Microsoft 365 Foundations Benchmark, v7.0.0.
As Microsoft 365 changes, CIS revises its benchmark: it adds controls, rewrites others and retires ones that no longer apply. This release brings SPM’s checks up to v7.0.0 and labels every change. Security teams can see which findings are new, which have refreshed guidance and which checks are going away.
With this release:
- 28 new checks based on the latest CIS guidance, marked NEW
- 121 existing checks moved to v7.0.0. The 47 with refreshed guidance are marked UPDATED
- 14 checks that CIS withdrew are marked DEPRECATED and will be removed in 30 days
- A v7 filter on the Evaluations page lets you review the new benchmark on its own
Teams that report against CIS can trust that SPM results match the current benchmark, without remapping controls by hand. The tags also make it easier to explain changes in posture results to auditors and leadership.
Read More