Outlook: Quick steps in the pop-out ribbon

🚨 The Signal: Outlook Quick Steps are now in pop-out email ribbons. This feature allows users to automate tasks, potentially increasing the risk of misconfigurations or unintended data handling through custom actions.

The Impact

End users are affected by new automation capabilities, creating a low security risk from potential misconfigurations.

• End users: Risk of unintended actions if Quick Steps are misconfigured.
• Security teams: Need to monitor for data handling policy violations via Quick Steps.
• Compliance teams: Potential for non-compliant data movement if Quick Steps are not governed.

The Action

1. Review existing Quick Step policies in Exchange Online to identify potential risks.
2. Communicate best practices for Quick Step creation to end-users, focusing on data handling.
3. Consider implementing Exchange transport rules to prevent specific Quick Step-driven actions if deemed high risk.

Domain: Exchange · Impact: low · Workload: Exchange Online