Skip to content

The 24 Dropbox security checks Black Cat runs

Black Cat SSPM evaluates 24 security policies against your Dropbox configuration on every scan, classifies each finding by risk, and provides remediation steps. Browse them by topic below.

How to connect Dropbox — what access Black Cat needs, and why.

Identity, MFA & sign-in (4)

Access control & privilege (10)

Data sharing & exposure (5)

Other checks (5)

severity: info Office Add-in Disabled fix difficulty: easy #

Enable the Dropbox Office Add-in to allow users to save Microsoft Office files directly to Dropbox

  1. Sign in to the Dropbox Admin Console as an administrator
  2. Navigate to Admin Console > Settings > Integrations
  3. Locate the Microsoft Office Add-in setting
  4. Enable the Office Add-in for the team
  5. Notify users that they can now install and use the Dropbox for Office add-in

Vendor docs ↗

Satisfies: ISO 27001:2022 A.8.9 SOC 2 Type II CC7.2 CIS Controls v8 CIS-08 NIST CSF 2.0 DE.CM GDPR (SaaS Security) GDPR-32.1d HIPAA (SaaS Security) HIPAA-312.b NIS2 Directive NIS2-21.b.2 DORA (SaaS Security) DORA-10.1

severity: low Suspended Member Not Removed fix difficulty: easy #

Remove suspended Dropbox member accounts to free licenses and prevent accidental reactivation

  1. Sign in to the Dropbox Admin Console as an administrator
  2. Navigate to Admin Console > Members
  3. Filter by suspended status to identify affected accounts
  4. For each suspended account, confirm the member no longer requires access
  5. Click the member and select Remove from team
  6. Transfer any team-owned content to an active member before removal

Vendor docs ↗

Satisfies: ISO 27001:2022 A.8.9 SOC 2 Type II CC7.2 CIS Controls v8 CIS-08 NIST CSF 2.0 DE.CM GDPR (SaaS Security) GDPR-32.1d HIPAA (SaaS Security) HIPAA-312.b NIS2 Directive NIS2-21.b.2 DORA (SaaS Security) DORA-10.1

severity: low Empty Group fix difficulty: easy #

Remove empty Dropbox groups that have no members to reduce clutter

  1. Sign in to the Dropbox Admin Console as an administrator
  2. Navigate to Admin Console > Groups
  3. Identify groups with zero members
  4. Verify the group is no longer needed
  5. Delete the empty group

Vendor docs ↗

Satisfies: NIS2 Directive NIS2-21.e.4 DORA (SaaS Security) DORA-9.10

severity: low Archived Team Folder fix difficulty: easy #

Review archived Dropbox team folders and permanently delete them if no longer needed

  1. Sign in to the Dropbox Admin Console as an administrator
  2. Navigate to Admin Console > Team folders
  3. Identify archived team folders
  4. Verify with folder owners whether the data is still needed
  5. Permanently delete archived folders that are no longer required

Vendor docs ↗

Satisfies: NIS2 Directive NIS2-21.e.4 DORA (SaaS Security) DORA-9.10

severity: medium Connected App with Full Dropbox Access fix difficulty: medium #

Review and revoke Dropbox connected apps that have full account access instead of a sandboxed app folder

  1. Sign in to the Dropbox Admin Console as an administrator
  2. Navigate to Admin Console > Connected apps
  3. Locate the flagged application
  4. Review the app's permissions and whether full access is justified
  5. If the app does not require full access, revoke it and ask the user to reconnect with a scoped version
  6. If full access is required, document the justification

Vendor docs ↗

Satisfies: ISO 27001:2022 A.5.23 CIS Controls v8 CIS-15.1 NIST CSF 2.0 GV.SC GDPR (SaaS Security) GDPR-28.1 HIPAA (SaaS Security) HIPAA-314.a NIS2 Directive NIS2-21.d DORA (SaaS Security) DORA-28.4

The information on this page is provided for general informational purposes and is believed to be accurate as of its most recent update. Product names, logos, and trademarks are the property of their respective owners and are used for identification purposes only; their use does not imply any affiliation with or endorsement by those owners. Descriptions of third-party applications and of compliance frameworks are based on publicly available documentation and may change over time.

See these checks run on your stack

Start a free 14-day trial — no credit card required.

Start Free Trial