The 27 DocuSign security checks Black Cat runs
Black Cat SSPM evaluates 27 security policies against your DocuSign configuration on every scan, classifies each finding by risk, and provides remediation steps. Browse them by topic below.
How to connect DocuSign — what access Black Cat needs, and why.
Access control & privilege
20 checks · highest severity: high
Configuration hardening
7 checks · highest severity: high
Access control & privilege (20)
- Weak Password Length severity: high
- Weak Password Strength severity: high
- No Password Expiration severity: high
- No Account Lockout severity: medium
- Long Web Session Timeout severity: medium
- Long Signing Session Timeout severity: medium
- Long Mobile Session Timeout severity: medium
- Excessive Admins severity: high
- Inactive User With Access severity: medium
- Overly Broad Permission Profile severity: medium
- User Without Group severity: low
- No SSO Configured severity: high
- Unclaimed Domain severity: high
- SSO Not Mandatory severity: high
- Empty Group severity: low
- Permission Profile Manages Users severity: medium
- Unused Admin Permission Profile severity: low
- Disabled Admin Account severity: high
- Domain Not Linked to Identity Provider severity: medium
- Password Security Questions Enabled severity: medium
Configuration hardening (7)
- Sign On Paper Enabled severity: medium
- Signer Reassignment Enabled severity: medium
- PowerForms Enabled severity: medium
- No Signer Certificate Required severity: high
- Recipient Domain Validation Disabled severity: medium
- No IP Restrictions severity: high
- Bulk Recipients Enabled severity: medium