Alerts SHALL be enabled.

Why This Matters

Email security alerts are a critical early warning system for identifying potential threats such as phishing campaigns, mailbox compromises, or suspicious forwarding rules. Without alerts enabled, your organization may remain unaware of active attacks, increasing the risk of data breaches and compliance violations. IT administrators must ensure alerts are active to maintain visibility into security incidents.

What Aether365 Checks

This check verifies that alerts are enabled in your Microsoft 365 environment, as required by CIS and CISA guidance. It appears in the Aether365 dashboard under the microsoft-365 security checks category.