Outlook: Save an Event as a Draft on Android

🚨 The Signal: Outlook for Android now allows saving meeting invitations as drafts. This change introduces a new vector for potential information leakage if sensitive draft meeting details are not properly managed or secured on mobile devices.

The Impact

End users are affected by new draft storage, creating a low security risk of unmanaged sensitive data on mobile devices.

• End users: Draft meetings may contain sensitive data, increasing risk if devices are compromised.
• Security teams: New data storage location requires review for mobile device data protection policies.
• Compliance teams: Potential for unmanaged sensitive information on personal mobile devices.

The Action

1. Review existing mobile device management (MDM) policies in Microsoft Intune for data protection on Android devices.
2. Communicate to users about the implications of saving sensitive information in draft meetings on mobile devices.
3. Consider implementing or reinforcing data loss prevention (DLP) policies for Outlook mobile if sensitive data is a concern.

Domain: M365-Apps · Impact: low · Workload: M365 Apps