Guide to NIST Rules in the Compliance Center

To guard against unauthorized access to CUI:

1. Click the edit button, and select a DLP rule that blocks public shares.
2. Change any existing public shares to private.

1. Go to Settings > Misc > Password.
2. Configure the setting as follows:
   Incorrect Attempts Before Account Lockout - a value greater than 0.

If the Incorrect Attempts Before Account Lockout setting is set as indicated, then status is OK; if not, status is Issues.

To set up a workflow to block the connection of a new mobile device:

• Go to Workflow > Add Workflow and choose If any new client app connects > Block the device for admin approval.
  
  For information about this workflow, see:
  Admin Approval Required Workflow

If the workflow does not exist or is not enabled, the status is Issues.

• Go to Settings > Admin, and set Audit Logging Level to REQUEST or FULL.

To enable at least one admin user to access the Audit Reports:

1. Go to Admins and create a role with read access to the Audit Reports.
2. Add at least one user to the role.

If one or more users have access to the Audit Reports, the status is OK; if not, the status is Issues.

Enable this rule to confirm that admin can disable or change non-essential ports and services.

For information about changing default port or web server settings in FileCloud, see: Changing a Default Port or Web Server Setting.

• Go to Settings > Authentication, and set Authentication Type to Active Directory or LDAP.

To enable SSO, see:
SAML Single Sign-On Support

To set regulations for strong password management:

1. Go to Settings > Misc > Password.
2. Configure the settings as follows:
   Password Length - 8 or more.
   Enable Strong Passwords - check.
   Disallow Commonly Used Passwords - check.
   User Password Expires In Days - a value greater than 0.

To disallow the reuse of previous passwords:

1. Go to Settings > Misc > Password. 
2. Configure the setting as follows:
   Number of Previous Passwords that cannot be reused - a value greater than 0.

To require new accounts to change passwords:

1. Go to Settings > Misc > Password.
2. Configure the setting as follows:
   New accounts must change password - check.

To protect CUI from malicious file uploads:

1. Go to Settings > Third Party Integrations > Anti-Virus.
2. Configure an Anti-Virus type.

To maintain security:

Configure storage encryption. 

1. Go to Settings > Storage > Encryption and enable encryption.
2. Encrypt all existing files.
   

See Setting Up Managed Storage Encryption in the support document.

If storage is not fully encrypted or any existing files are not fully encrypted, status is Issues.

1. Go to Admins and create a role with Compliance access to the Compliance Center.
2. In Admins, add at least one user to the role with access to the Compliance Center.

If one or more users have access to the Compliance Center, status is OK; if not, status is Issues.

1. Click the edit button, and select a DLP rule that blocks public shares.
2. Change any existing public shares to private.

If the DLP rule exists and is enabled and there are no existing public shares, status is OK; if not, or if modifications to the rule allow public shares, status is Issues.

To confirm automatic logoff of sessions:

1. Go to Settings > Server, and set Session Timeout to a value greater than 0.

To implement procedures to regularly review records such as audit logs and violation report:

• Enable Send Admin Governance Report Emails option in Admin settings.

If the Send Admin Governance Report Emails setting is enabled, status is OK; if not, status is Issues.