Outlook: Choose save location when saving to a cloud account in the Outlook app for iOS and Android

🚨 The Signal: Outlook mobile now allows users to select specific cloud folders for saving attachments. This increases the risk of data sprawl and misclassification if not governed, impacting data loss prevention and information protection.

The Impact

End users are affected by new save options, increasing the risk of unclassified or sensitive data being stored in inappropriate cloud locations.

• End users: Increased risk of saving sensitive data to unapproved cloud locations.
• Security teams: Greater challenge in enforcing data classification and DLP policies.
• Compliance officers: Potential for non-compliance with data residency and protection policies.

The Action

1. Review and update existing Microsoft Purview Data Loss Prevention (DLP) policies to include cloud storage locations.
2. Communicate updated data handling guidelines to end-users regarding saving attachments to cloud services.
3. Leverage Microsoft Purview Information Protection sensitivity labels for automatic classification and protection of documents.
4. Consider Intune App Protection Policies (APP) to restrict 'Save As' functionality to approved locations for managed apps.

Impact: medium · Workload: M365 Apps