Ensure Exchange Online Spam Policies are set to notify administrators (Only Checks Default Policy)

Why This Matters

Without proper notification settings on your default Exchange Online spam policy, administrators may remain unaware of spam filtering actions or false positives. This lack of visibility can allow malicious emails to go undetected or legitimate emails to be incorrectly quarantined, increasing the risk of phishing attacks or business disruption.

What Aether365 Checks

This check verifies that the default Exchange Online spam policy is configured to send notifications to administrators about spam filtering actions. It appears in the Aether365 dashboard under microsoft-365 checks as part of the CIS benchmark.