Microsoft Viva: Viva Glint - Export Team Summary report in Viva Glint to editable PowerPoint slides

🚨 The Signal: Viva Glint now allows exporting team summary reports to editable PowerPoint. This changes data handling, potentially increasing the risk of sensitive HR data exfiltration and unauthorized modification outside of controlled systems.

The Impact

Managers are affected by increased data exfiltration risk of sensitive HR data.

• Managers: Increased risk of sensitive HR data leaving controlled environments.
• Security Teams: New vector for data exfiltration and unauthorized data modification.
• Compliance Teams: Challenges in maintaining data residency and access control compliance.

The Action

1. Review and update data loss prevention (DLP) policies in Microsoft Purview to detect and restrict sensitive Viva Glint data exports.
2. Educate managers on the risks of exporting sensitive HR data and best practices for secure handling of exported reports.
3. Implement or reinforce access controls for exported PowerPoint files containing sensitive data.
4. Monitor audit logs for unusual export activities from Viva Glint.

Impact: high · Workload: Other