A spam filter SHALL be enabled.

Why This Matters

Spam filters are your first line of defense against malicious email campaigns, phishing attempts, and unwanted bulk mail that can compromise user productivity and security. Without an enabled spam filter, your organization's mailboxes are directly exposed to harmful content that could lead to credential theft, malware infections, or data breaches. Enforcing this control ensures that malicious messages are identified and quarantined before reaching end users.

What Aether365 Checks

Aether365 verifies that the spam filter policy in your Microsoft 365 tenant is enabled and actively filtering inbound messages. This check appears in your Aether365 dashboard under the microsoft-365 security checks section.