(Updated) Microsoft Teams: Organization evaluation score for apps and agents

🚨 The Signal: Teams will introduce an automated app and agent evaluation system. Admins define trust requirements once, and the system scores apps against these, streamlining security and compliance reviews for third-party integrations.

The Impact

Teams admins are affected by a new automated app evaluation system, reducing manual security review burden.

• Teams admins: Streamlined app approval process, reducing manual security and compliance review.
• Security teams: Improved visibility and consistency in third-party app risk assessment.
• Compliance officers: Automated reporting on app adherence to organizational requirements.
• Users: Faster access to approved, secure Teams applications and agents.

The Action

1. Review and understand the new evaluation score settings tab in Teams admin center > Teams apps.
2. Define and configure your organization's specific approval requirements (e.g., GDPR, SOC 2, data residency) within the new settings.
3. Communicate the new automated app evaluation process to relevant stakeholders, including security and compliance teams.
4. Monitor the generated evaluation scores and reports for all Teams apps and agents to inform approval decisions.

Domain: Teams · Impact: medium · Workload: Teams · Essential Eight: Application Control · ISM: ISM-0843, ISM-1490, ISM-1544, ISM-1582, ISM-1656, ISM-1657, ISM-1658, ISM-1659, ISM-1660, ISM-1870, ISM-1871