Services
Summary
Site attestation policy is now generally available, enabling SharePoint admins to require site owners to periodically verify site ownership, membership, and sharing settings. This helps reduce compliance risks and prevent oversharing. The feature is off by default and requires admin setup with configurable enforcement actions.
Details
Introduction
Empower your organization with proactive governance. The new site attestation policy ensures that site owners regularly validate critical details like ownership, membership, and sharing settings. By automating periodic reviews and enforcement actions, this policy helps reduce compliance risks, prevent oversharing, and maintain a secure, well-governed SharePoint Online experience.
When this will happen:
This feature is now generally available to all customers.
How this will affect your organization:
- Who is affected: SharePoint administrators and site owners.
- What will happen:
- SharePoint admins can enable site attestation policy in the SharePoint Admin Center.
- Site owners will receive periodic prompts to confirm site details such as ownership, membership, and sharing settings.
- Enforcement actions (such as restricting access or archiving) can be configured if attestations are not completed.
- The feature is off by default and requires admin configuration.
What you can do to prepare:
- Notify your SharePoint administrators about the new policy.
- Update internal documentation and workflows to account for this capability.
- Review governance policies and determine enforcement actions for non-compliance.
Learn more: Request recurring site attestations for SharePoint sites
Compliance considerations:
No compliance considerations identified, review as appropriate for your organization.